Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
0 votes
1 answer
524 views

What are the possible consequences of clicking a link in a phishing mail? [duplicate]

I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser. As soon as I had clicked it I realized my mistake. I did not enter any password or give away info. What are the ...
Andy's user avatar
  • 101
1 vote
0 answers
526 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
Allsonto's user avatar
5 votes
0 answers
1k views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
Sz.'s user avatar
  • 151
0 votes
1 answer
157 views

Cpanel Phising Link

Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is redirect url https://example.net/esg9/cpanel.php?token=...
Jeremy Kenn's user avatar
0 votes
2 answers
5k views

Can an HTML attachment in an email contain a virus?

I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
Mangoandkiwi's user avatar
2 votes
4 answers
555 views

Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?

One big threat out there is typosquat domains. For example instead of: steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login. Why do ...
birdd's user avatar
  • 41
0 votes
1 answer
272 views

Purpose of fraudulent AWS SL/TLS certificate request for my domain

I just received an email from AWS re Certificate request for [my personal domain]. This email asked me to approve this request with a link or forward to a AWS email for validation. Needless to say ...
Nigel Savage's user avatar
0 votes
1 answer
183 views

Is it a myth that signing up for social media puts your email open for phishing attacks?

So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder. This suspects me that operating a social ...
DanPin's user avatar
  • 1
1 vote
1 answer
155 views

Random garbage in phishing [duplicate]

What does it mean when an obvious scam e-mail, possibly "mere" phishing, includes in (whatever we call its signing-off small-print) what looks like a pointless list of dozens, perhaps ...
Robbie Goodwin's user avatar
0 votes
3 answers
389 views

Is it safe to open email links in a private window?

Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
Arturo's user avatar
  • 363
0 votes
2 answers
415 views

Why are there so many special characters in this phishing link?

I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd: The link that victims are supposed to click looks very weird ...
user3684240's user avatar
24 votes
3 answers
4k views

Browser is accepting italic/bold Unicode as part of SPAM email's URL

This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
asker13's user avatar
  • 351
0 votes
0 answers
46 views

WP Blog with phishing js file by a Google Search Result? [duplicate]

I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano". The first Google result seems to point to the official page: https://rafaeltheissen.com/ Here ...
Denny Weinberg's user avatar
5 votes
1 answer
799 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
LostCoder's user avatar
0 votes
1 answer
2k views

Is this is phishing attempt?

I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit ([email protected]) but the problem is, the email ...
Linda Sands's user avatar
4 votes
0 answers
571 views

Are external email warnings effective?

Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
Nate Lowry's user avatar
2 votes
0 answers
182 views

Guessable oauth client id and phishing

OAuth manual advises that the client ID should not be easily guessable to decrease phishing attacks. https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/ Is it still the case ...
Stanislav Berkov's user avatar
1 vote
1 answer
162 views

Link test differs from link location in plaintext view is not visible in Thunderbird

Today I noticed something strange. I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link. However, in ...
kaiya's user avatar
  • 452
0 votes
0 answers
125 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
user1709076's user avatar
0 votes
1 answer
1k views

Malicious looking mirrors resembling trademarked websites? Phishing?

I honestly have no idea what this is. Reddit has a growing number of users posting far-right misinformation constantly. Googling their usernames shows a whole list of results, many of which don't ...
arvindroid's user avatar
1 vote
2 answers
293 views

Scamming explanation

I've just received a scam SMS with that invite me to click on a link to check a delivery. Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...
Lorenzo's user avatar
  • 13
1 vote
1 answer
264 views

How dangerous are phishing links really?

Some phishing links contain random digits / codes (e.g: https://refno1234.example.com). For such links, is there an increased risk by clicking on them because the unique code could be matched to your ...
MrJoe's user avatar
  • 819
0 votes
1 answer
2k views

Can a text file disguised as .xlsm be malicious?

A hour ago we receive a suspicious mail targeting some of our mailing lists. It contains a .zip file, itself containing a .xlsm file. This .xlsm file appears to be recognized as an ASCII text file ...
Sumak's user avatar
  • 103
0 votes
0 answers
125 views

I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]

Screenshot: The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com. The suspicious link "Unsubscribe_click_here" is: mailto:cr@burlondesti....
SpaceMonkey's user avatar
1 vote
0 answers
45 views

Is this a Phishing email a bit more advanced than usual? [duplicate]

I received an email from a friend, but it was not them. It was their name in the sender field but there was a different email address hidden underneath. There was a zip file attachment. But here’s the ...
emm's user avatar
  • 11
1 vote
2 answers
910 views

Phishing emails sent to my contacts, from another contact [duplicate]

Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending ...
user252164's user avatar
4 votes
0 answers
535 views

What is "JavaGhost - Mass Twilio Checker"?

Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank. The passwords have all ...
Moshe Katz's user avatar
  • 1,360
1 vote
0 answers
400 views

Cmd line tool to scan an eml file against spam/phishing rules [closed]

For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
Robert's user avatar
  • 11
60 votes
4 answers
9k views

What is the purpose of a targeted email without any meaningful content?

I received an email to my corporate email account from an external Gmail account. The list of recipients clearly shows (an eventually successful) attempt to guess my email address based on my personal ...
Itaypk's user avatar
  • 703
3 votes
2 answers
344 views

How can a phishing page know my account information?

I clicked on a phishing website. I was surprised to find that this website looked exactly like google and had my information displayed. The information displayed were my email and my profile picture. ...
kyu's user avatar
  • 33
35 votes
6 answers
6k views

How to protect against SIM swap scammers?

SIM swap occurs where the scammer uses phished information about you to request a SIM card replacement from your cell phone carrier, by tricking them into believing that it is you who is making the ...
user610620's user avatar
15 votes
6 answers
3k views

Does phishing include ransomware?

Does the definition of phishing also include tricking the victim into executing malware, such as ransomware, that's not used to retrieve the victim's information? As I see it, Wikipedia's definition ...
Matthias Braun's user avatar
0 votes
2 answers
208 views

Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)

In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
user610620's user avatar
16 votes
1 answer
4k views

Why doesn't Gmail make it clearer that emails have been signed by DKIM and delivered over TLS?

If a webpage is delivered over HTTPS, the browser makes this clear with a padlock symbol. It's something that people look for. My browser also makes it clear that a page is not secure. Why aren't ...
Ian Warburton's user avatar
1 vote
1 answer
2k views

Cutting down phishing attacks from AmazonSES

I am trying to work on cutting down on the amount of spam, phishing, and malicious emails coming through via AmazonSES burners. Has anyone devised a method or certain IOCs to block on?
gost45's user avatar
  • 11
1 vote
1 answer
196 views

How to protect a vulnerable Family Member?

I apologize if this isn't the best exchange to be asking in, but I'm a little new at this. Problem: A close relation outside my local area with declining cognitive function is demonstrating ...
Chris G.'s user avatar
0 votes
2 answers
419 views

How was the hacker able to get my Instagram tag through Facebook when they weren’t linked?

All of this happened on 18th November 2020 A person I know sent me a phishing link of Facebook then Google, I entered my credentials however as soon as I found out that its a phishing link, I turned ...
yessirmk's user avatar
0 votes
1 answer
194 views

Is hacking email with simjacking a concern if you don't have 2FA for the email?

I've been doing some reading on simjacking lately, mainly around how one may be compromised. One common tidbit I read is that you can access your email and your other financial services if you have ...
tendim's user avatar
  • 131
1 vote
1 answer
320 views

Is it safe to visit any website in TOR when the Security Bar is set at Maximum? (Safest)

Someone has sent me a link on Tor which when visited instantly read that the website itself was not available and that apparently the link is broken somehow. When using Tor i use the option "...
ticalluke02's user avatar
1 vote
0 answers
303 views

Phishing/spam websites using the same domain as legitimate websites?

I have found links to an obvious bait website. Link to PHISHING website. However, I was very surprised to see the domain is "holidayinn.com". On first sight this appears to be a genuine ...
username193228's user avatar
1 vote
0 answers
127 views

How to determine if a webshop is scam? [closed]

Nowadays people prefer to do their shopping online rather than using the real shop, especially because of the COVID-19 restrictions. But in the same context, attackers (scammers) are trying to gain ...
Mirsad's user avatar
  • 10.2k
0 votes
2 answers
2k views

Can subdomains of trusted domains be registered for malicious use?

I was working on a rule that reports phishing sites, and I wanted to exclude known domains, such as .microsoft.com etc, and a doubt arose: can someone register a subdomain of a known site to phishing ...
Pleasant94's user avatar
1 vote
1 answer
790 views

Can a spam email full of junk characters be dangerous?

Recently, I've been receiving emails from JP MORGAN CHASE that are blatant phishing attempts. Out of curiosity I have opened them a few times, and they're just completely full of absolute junk ...
nightsurfer's user avatar
0 votes
1 answer
314 views

Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?

In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
s3c's user avatar
  • 103
10 votes
1 answer
24k views

How is it possible that this spam mail came from Google Forms without revealing their sender address?

I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the ...
Flying Thunder's user avatar
77 votes
13 answers
19k views

Why is a link in an email more dangerous than a link from a web search?

Everyone knows of the common cybersecurity tips to be careful when you open links in an email. But every day we look for something on the Internet, clicking links which the search engine shows us, and ...
Adam Shakhabov's user avatar
1 vote
0 answers
163 views

XSS on marketing websites like craigslist. How does this work on a technical level? [closed]

I was wondering how this works. We have a marketing site in Holland where people can sell second hand goods. Rumor goes that there is a lot of phishing going on there and XSS code is used in the ...
Freddy Nova's user avatar
1 vote
1 answer
142 views

Why can't mail clients verify an email was sent from the user and server it claims to be from?

Background When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
MikeSchem's user avatar
  • 2,361
3 votes
1 answer
232 views

How realistic is to be 'hacked' by ONLY clicking a link [duplicate]

In the case of phishing training, most training will say "don't click the link, you can get hacked!" If there was an exploit that could bypass the chrome sandbox on an up-to-date verison of ...
Eizooz's user avatar
  • 31
10 votes
5 answers
3k views

Does 2FA Help Prevent Unauthorized Access in Phishing Attacks?

Given Attacker is targeting a user of bank.com. bank.com uses SMS or Google Authenticator 2FA, where the user enters the 2FA code into a form. Scenario Attacker registers domain name baank.com ...
MikeSchem's user avatar
  • 2,361

1
2
3 4 5
12