Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
0 votes
2 answers
266 views

Should I take action if I receive a phishing email that passes all email sender checks?

I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
0 votes
1 answer
136 views

Protect from phishing in MS Teams

Yesterday I received an odd message on MS Teams (a phishing attempt) that I've not seen before. The message is made to look like it includes 2 parties; 1 internal and 1 external, in addition to myself....
0 votes
1 answer
393 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
1 vote
2 answers
139 views

Is it bad practice to prompt users to reset password when there is no evidence of a breach?

I have received many security emails from LinkedIn over the past few weeks. An example is shown below (redaction mine) I do not live in the USA and I did not try to access LinkedIn at the times these ...
1 vote
2 answers
164 views

Unsolicited opt-out from data brokers

I received several automated emails at an early hour from several data brokers (e.g., Spokeo) asking me to confirm an opt-out for my email address and name. I did not request these, but did so about ...
0 votes
1 answer
76 views

Obfuscated HTML [closed]

I'm looking at a potential phishing site and I see that some of the HTML is obfuscated. It's not Base64. All the links look like this: <link href="6bkaQeQe69e/st-...
0 votes
1 answer
124 views

How to prevent credential stealing of customers via phishing and domain squatting

Threat actors are creating lookalike domains (ex. Telecom.com to te1ecom.com), and using those to phish users for credentials (not employees). They’re getting the MFA tokens, too. What could be done ...
0 votes
2 answers
158 views

What's the risk of interacting with a social engineer?

I received a WhatsApp message. I never registed with any recruitment job portal, or even speak Arabic at all What are the dangers in myself trying to find out what happened (did they send the same ...
0 votes
1 answer
195 views

How can I filter out phishing e-mails containing malware using Gmail?

I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this: 6 5 4 8 2586 8016 70170 2 1 08 05 60 172 01 ...
1 vote
3 answers
451 views

Plausible PayPal phishing... with no evidence credentials were stolen

Yesterday my housemate was almost scammed by someone on the internet, or so I thought. She was selling some goods on a ebay-like website, and someone contacted her to buy her stuff. She then received ...
1 vote
0 answers
92 views

how can you tell if phishing email link was clicked by using logs [closed]

100 employees of a company received an email with a phishing link, How can I tell who clicked on the email phishing link and how many got infected with malware? 3 logs were given, email log, web ...
1 vote
1 answer
87 views

Is FIDO authN vulnerable to relay attacks?

In this question: Is FIDO2 authentication vulnerable to a social engineering replay attack? it was answered that no, not vulnerable because "the keypair used to by the FIDO device to authenticate ...
16 votes
1 answer
7k views

Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

I can't believe it happened to me but I entered Gmail account's user-name and password into a website as part of a phishing scam. I use Gmail's 2-step verification and have changed my password. Is ...
1 vote
0 answers
162 views

WordPress site hacked [closed]

We got hacked. Our setup: DigitalOcean VPS, Apache, multiple domains & WP websites, Elementor Pro, hopefully safe plugins. Known facts: It's phishing. The virus infects all the websites on our ...
199 votes
3 answers
37k views

Don't understand how my mum's Gmail account was hacked

My mum (on Gmail, using Chrome) received an email from a friend's Hotmail address. She opened the email (very obviously a phishing email) and clicked a link in it. This opened a webpage with loads of ...
0 votes
0 answers
51 views

Phishing mails to hidden Azure mailboxes

After some research, I couldn't find a clear answer: in Azure Cloud Domain, some users received phishing emails to hidden mailbox addresses. How can that be? How can those mailbox addresses be known ...
0 votes
2 answers
139 views

Why don't we sandbox email clients company-wide?

Following on to questions like Sandbox for attachment accessment and How do I safely inspect a suspicious email attachment?. Why don't we sandbox email clients company-wide? I must be missing ...
0 votes
1 answer
2k views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
27 votes
4 answers
32k views

Is a safelinks.protection.outlook.com link phishing?

Received an email which contain the below hyperlink https://nam02.safelinks.protection.outlook.com/?url=http*3A*2F*2Factuallysale.com*2F&data=02*7C01*7C*7C548d20ace3ec4747fe1008d7d7d8b597*...
0 votes
2 answers
412 views

How was the hacker able to get my Instagram tag through Facebook when they weren’t linked?

All of this happened on 18th November 2020 A person I know sent me a phishing link of Facebook then Google, I entered my credentials however as soon as I found out that its a phishing link, I turned ...
0 votes
1 answer
216 views

Spoof email is using my domain name email address but target almost only my contact list with credible content body

Since yesterday, one of my work email addresses is used to send spoof emails with phishing attachments. SPF and DKIM was configured on my domain name but not DMARC, but since yesterday in the evening, ...
0 votes
2 answers
1k views

Conducting Ethical Phishing Attack [closed]

For research purposes, I'm conducting an ethical phishing attack in my institution. I have permission from the institution for the same. I've created the phishing site and the email content, and I'll ...
68 votes
4 answers
111k views

Are there any security risks in replying to an SMS message?

I routinely receive seemingly harmless SMS messages from unknown people. They're usually simple, like "Hi" or "Hello" or "Are you there?". This happens several times a week, and certainly often enough ...
1 vote
1 answer
125 views

Measures to safeguard against ZeroFont phishing attack

What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
2 votes
1 answer
130 views

Distinguish origin of password prompts

I am wondering how to distinguish (password) prompts that the OS issued from prompts that are delivered application-side. This question first occurred to me when considering Firefox master passwords, ...
1 vote
2 answers
5k views

Fake Microsoft Security Department [duplicate]

Someone called my home saying that he was calling from Windows Security Department. He said that there are about 16 other people connected to my computer and they're doing illegal things online. He ...
1 vote
0 answers
81 views

Impersonating phishing incident [closed]

An email has been circulated with the username of our organization, with some internal users and also to the customers. Observed that IP 40.92.46.74, which is Microsoft one. We have been using our ...
4 votes
2 answers
3k views

Spear phishing data set

Are there any existing data sets of spear phishing emails available? I've found a bunch of data sets of phishing emails, but that's not what I'm looking for. I'm not looking for mass phishing ...
6 votes
1 answer
9k views

Databases with spam, phishing email examples [duplicate]

I'm working on a little project trying to see if I can predict the likelihood that an email is in fact a security risk (phishing, spam, social engineering, etc). I order to do this I need to have a ...
2 votes
2 answers
535 views

Wordpress blog hacked?

There is a Wordpress blog running on Wordpress 4.0. Anyone having the company webmail can signup to the blog using their Google+ account and submit blog posts. Once posted they will be sent to some ...
1 vote
0 answers
465 views

I caught myself in the middle of a phishing scam

I got caught up in a phishing scam where I conducted an automated interview with emails that appeared legitimate from real people within my college. I did respond to multiple emails and the only ...
1 vote
1 answer
673 views

How are hardware keys phishing resistant to man-in-the-middle attacks?

I've heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fails ...
2 votes
1 answer
315 views

Suspicious GitHub mirror site (https://hzb.world/)

Through some odd Google rabbit hole, I ended up at what appeared to be the GitHub website. I reflexively tried logging in to view my repositories. Upon attempting to log in, it said my browser did ...
5 votes
1 answer
777 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
88 votes
1 answer
14k views

Isn't the BBC being extremely irresponsible in describing how to authenticate an account-related email?

On this webpage, the BBC says: I’ve received a ‘Changes to your BBC account’ email claiming to be from the BBC – is this a genuine email? At the end of September 2016, we upgraded our ‘BBC iD’ ...
1 vote
0 answers
78 views

Can an attacker steal one's credentials if they never ask for it? [closed]

Can a website that never asks for one's credentials still steal one's credentials? If yes, how?
1 vote
1 answer
236 views

"Phishing Attack Ahead" warning on Apple Mail link preview

I received a suspicious email and moved it to my spam folder. I kept getting the same email so I blocked the sender. I got curious about the link in it and pressed the dropdown arrow on Mac mail to ...
0 votes
0 answers
26 views

I clicked what looked like an Amazon email, but it (maybe) was from an Amazon affiliate. Ended up at Amazon.com anyway. Can I safely investigate? [duplicate]

In a case of clicking too fast, I clicked on a picture that looked like it was from Amazon. However this was not the case. I did end up at Amazon, but I'm aware that other things could've taken place ...
1 vote
2 answers
8k views

SEToolkit Not Cloning Login Page

I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
1 vote
2 answers
226 views

DNS hijacking/poisoning effect on URL/URI and password manager autotype/autofill

A benefit to password managers, at least some of them, is that they can look at the URL and only use autotype/autofill when on the correct site, which can help prevent pharming since if instead of ...
123 votes
5 answers
54k views

Why do phishing emails have spelling and grammar mistakes?

Are the spelling and grammar mistakes in phishing emails done on purpose? Is there some wisdom behind it? Or they are simply indicative of the fact that they've been written by someone who does not ...
0 votes
1 answer
268 views

Can I avoid phishing attacks by putting in the wrong password first before logging in?

Here's my logic. The only reason someone would phish you is to get your credentials. That means they don't know your credentials. Thus, if you try to login to their fake website, they can't be sure ...
3 votes
1 answer
220 views

Why does M365 keep accepting phishing emails that Gmail rejects?

At my work email, which is handled by MS Office 365 Outlook, I keep getting phishing emails, typically 3 times a week, usually with some attachment "your company's monthly financial report" ...
2 votes
2 answers
283 views

Does attaching malware or virus in an email count as Phishing attack

I know that Phishing attacks try to gain access or sensitive information from the user or victim. This attack comes under the Social Engineering attack, where personal confidential data such as login ...
37 votes
4 answers
6k views

What is the purpose of hiding spam links in some obscure forum posts?

I'm moderating one small Discourse forum and we, like everyone else, get spammers from time to time. Our forum is small, like 40-60 weekly unique visitors. Our forum requires that each new user's ...
0 votes
1 answer
153 views

Why is physical security key helpful, since most accounts have alternative 2FA methods a hacker could use?

I would like to know why a physical security key is useful to have as default 2FA method given most accounts have some form of account recovery/alternative 2FA method. Google has had a bunch of ...
1 vote
2 answers
459 views

Why are @microsoft.com e-mail address not protected against spoofing

I got a lot of phishing attempts that appear to come from an actual microsoft.com e-mail address (see I need some verification about unusual login emails) I though this was odd, since I had hoped that ...
0 votes
0 answers
16 views

What should I do when I received spam emails? [duplicate]

I got these emails from a spammer to my inbox, I am not sure if these are phishing attempt. I can't tell. Click on one of them, I see this I checked the codes behind that mail, I see smtp.mailfrom=...
1 vote
1 answer
8k views

Amazon gift card phishing/spam -- what's the point?

I recently received an email message with the subject "San Diego Site Leadership and Management Team sent you an Amazon Gift Card!", sent to my work address, apparently from "Amazon.com ...
3 votes
2 answers
637 views

Possible Phishing Attempt?

I use an iPhone. Today I got a text from an unknown number starting from +65. The message was "your one-time Wifi password is xxxx and it’s valid for only 10 minutes". Thought it was a scam and ...

1
2 3 4 5
12