Questions tagged [phishing]
Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.
560
questions
0
votes
1
answer
524
views
What are the possible consequences of clicking a link in a phishing mail? [duplicate]
I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser.
As soon as I had clicked it I realized my mistake. I did not enter any password or give away info.
What are the ...
1
vote
0
answers
526
views
A PDF ran GetAdaptersAddresses. Should I be concerned?
I received and opened a PDF that ran:
GetTickCount
IsDebuggerPresent
SetWindowsHookExW
Sleep
GetAdaptersAddresses
These are the 2 files it wrote:
C:\Windows\ServiceProfiles\LocalService\AppData\...
5
votes
0
answers
1k
views
Disturbing/suspicious Google notifications about account recovery and password change
This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
0
votes
1
answer
157
views
Cpanel Phising Link
Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is
redirect url
https://example.net/esg9/cpanel.php?token=...
0
votes
2
answers
5k
views
Can an HTML attachment in an email contain a virus?
I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
2
votes
4
answers
555
views
Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?
One big threat out there is typosquat domains. For example instead of:
steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login.
Why do ...
0
votes
1
answer
272
views
Purpose of fraudulent AWS SL/TLS certificate request for my domain
I just received an email from AWS re Certificate request for [my personal domain].
This email asked me to approve this request with a link or forward to a AWS email for validation.
Needless to say ...
0
votes
1
answer
183
views
Is it a myth that signing up for social media puts your email open for phishing attacks?
So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder.
This suspects me that operating a social ...
1
vote
1
answer
155
views
Random garbage in phishing [duplicate]
What does it mean when an obvious scam e-mail, possibly "mere" phishing, includes in (whatever we call its signing-off small-print) what looks like a pointless list of dozens, perhaps ...
0
votes
3
answers
389
views
Is it safe to open email links in a private window?
Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
0
votes
2
answers
415
views
Why are there so many special characters in this phishing link?
I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd:
The link that victims are supposed to click looks very weird ...
24
votes
3
answers
4k
views
Browser is accepting italic/bold Unicode as part of SPAM email's URL
This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
0
votes
0
answers
46
views
WP Blog with phishing js file by a Google Search Result? [duplicate]
I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano".
The first Google result seems to point to the official page: https://rafaeltheissen.com/
Here ...
5
votes
1
answer
799
views
Windows Defender catches Trojan right after clean install
I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
0
votes
1
answer
2k
views
Is this is phishing attempt?
I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit ([email protected]) but the problem is, the email ...
4
votes
0
answers
571
views
Are external email warnings effective?
Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
2
votes
0
answers
182
views
Guessable oauth client id and phishing
OAuth manual advises that the client ID should not be easily guessable to decrease phishing attacks. https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/
Is it still the case ...
1
vote
1
answer
162
views
Link test differs from link location in plaintext view is not visible in Thunderbird
Today I noticed something strange.
I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link.
However, in ...
0
votes
0
answers
125
views
ThinkPHP show my website as the req.host - did the request really come from my web server?
I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4
, for example:
/public/index.php?s=...
0
votes
1
answer
1k
views
Malicious looking mirrors resembling trademarked websites? Phishing?
I honestly have no idea what this is.
Reddit has a growing number of users posting far-right misinformation constantly. Googling their usernames shows a whole list of results, many of which don't ...
1
vote
2
answers
293
views
Scamming explanation
I've just received a scam SMS with that invite me to click on a link to check a delivery.
Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...
1
vote
1
answer
264
views
How dangerous are phishing links really?
Some phishing links contain random digits / codes (e.g: https://refno1234.example.com). For such links, is there an increased risk by clicking on them because the unique code could be matched to your ...
0
votes
1
answer
2k
views
Can a text file disguised as .xlsm be malicious?
A hour ago we receive a suspicious mail targeting some of our mailing lists. It contains a .zip file, itself containing a .xlsm file.
This .xlsm file appears to be recognized as an ASCII text file ...
0
votes
0
answers
125
views
I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]
Screenshot:
The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com.
The suspicious link "Unsubscribe_click_here" is:
mailto:cr@burlondesti....
1
vote
0
answers
45
views
Is this a Phishing email a bit more advanced than usual? [duplicate]
I received an email from a friend, but it was not them. It was their name in the sender field but there was a different email address hidden underneath. There was a zip file attachment.
But here’s the ...
1
vote
2
answers
910
views
Phishing emails sent to my contacts, from another contact [duplicate]
Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending ...
4
votes
0
answers
535
views
What is "JavaGhost - Mass Twilio Checker"?
Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank.
The passwords have all ...
1
vote
0
answers
400
views
Cmd line tool to scan an eml file against spam/phishing rules [closed]
For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
60
votes
4
answers
9k
views
What is the purpose of a targeted email without any meaningful content?
I received an email to my corporate email account from an external Gmail account.
The list of recipients clearly shows (an eventually successful) attempt to guess my email address based on my personal ...
3
votes
2
answers
344
views
How can a phishing page know my account information?
I clicked on a phishing website. I was surprised to find that this website looked exactly like google and had my information displayed. The information displayed were my email and my profile picture. ...
35
votes
6
answers
6k
views
How to protect against SIM swap scammers?
SIM swap occurs where the scammer uses phished information about you to request a SIM card replacement from your cell phone carrier, by tricking them into believing that it is you who is making the ...
15
votes
6
answers
3k
views
Does phishing include ransomware?
Does the definition of phishing also include tricking the victim into executing malware, such as ransomware, that's not used to retrieve the victim's information?
As I see it, Wikipedia's definition ...
0
votes
2
answers
208
views
Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)
In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
16
votes
1
answer
4k
views
Why doesn't Gmail make it clearer that emails have been signed by DKIM and delivered over TLS?
If a webpage is delivered over HTTPS, the browser makes this clear with a padlock symbol. It's something that people look for. My browser also makes it clear that a page is not secure.
Why aren't ...
1
vote
1
answer
2k
views
Cutting down phishing attacks from AmazonSES
I am trying to work on cutting down on the amount of spam, phishing, and malicious emails coming through via AmazonSES burners.
Has anyone devised a method or certain IOCs to block on?
1
vote
1
answer
196
views
How to protect a vulnerable Family Member?
I apologize if this isn't the best exchange to be asking in, but I'm a little new at this.
Problem: A close relation outside my local area with declining cognitive function is demonstrating ...
0
votes
2
answers
419
views
How was the hacker able to get my Instagram tag through Facebook when they weren’t linked?
All of this happened on 18th November 2020
A person I know sent me a phishing link of Facebook then Google, I entered my credentials however as soon as I found out that its a phishing link, I turned ...
0
votes
1
answer
194
views
Is hacking email with simjacking a concern if you don't have 2FA for the email?
I've been doing some reading on simjacking lately, mainly around how one may be compromised. One common tidbit I read is that you can access your email and your other financial services if you have ...
1
vote
1
answer
320
views
Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)
Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
1
vote
0
answers
303
views
Phishing/spam websites using the same domain as legitimate websites?
I have found links to an obvious bait website. Link to PHISHING website. However, I was very surprised to see the domain is "holidayinn.com". On first sight this appears to be a genuine ...
1
vote
0
answers
127
views
How to determine if a webshop is scam? [closed]
Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
0
votes
2
answers
2k
views
Can subdomains of trusted domains be registered for malicious use?
I was working on a rule that reports phishing sites, and I wanted to exclude known domains, such as .microsoft.com etc, and a doubt arose: can someone register a subdomain of a known site to phishing ...
1
vote
1
answer
790
views
Can a spam email full of junk characters be dangerous?
Recently, I've been receiving emails from JP MORGAN CHASE that are blatant phishing attempts. Out of curiosity I have opened them a few times, and they're just completely full of absolute junk ...
0
votes
1
answer
314
views
Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?
In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
10
votes
1
answer
24k
views
How is it possible that this spam mail came from Google Forms without revealing their sender address?
I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the ...
77
votes
13
answers
19k
views
Why is a link in an email more dangerous than a link from a web search?
Everyone knows of the common cybersecurity tips to be careful when you open links in an email. But every day we look for something on the Internet, clicking links which the search engine shows us, and ...
1
vote
0
answers
163
views
XSS on marketing websites like craigslist. How does this work on a technical level? [closed]
I was wondering how this works.
We have a marketing site in Holland where people can sell second hand goods.
Rumor goes that there is a lot of phishing going on there and XSS code is used in the ...
1
vote
1
answer
142
views
Why can't mail clients verify an email was sent from the user and server it claims to be from?
Background
When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
3
votes
1
answer
232
views
How realistic is to be 'hacked' by ONLY clicking a link [duplicate]
In the case of phishing training, most training will say "don't click the link, you can get hacked!"
If there was an exploit that could bypass the chrome sandbox on an up-to-date verison of ...
10
votes
5
answers
3k
views
Does 2FA Help Prevent Unauthorized Access in Phishing Attacks?
Given
Attacker is targeting a user of bank.com.
bank.com uses SMS or Google Authenticator 2FA, where the user enters the 2FA code into a form.
Scenario
Attacker registers domain name baank.com
...