Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

43 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
1k views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
Sz.'s user avatar
  • 151
4 votes
0 answers
1k views

Phishing? All websites show the same, wrong certificate

today I went to my Online-Banking by typing in the correct domain name in Firefox. I could login and even see my actual balance. Then within the site a warning appeared that I should do a test-...
TheGermanGuy's user avatar
4 votes
0 answers
558 views

Are external email warnings effective?

Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
Nate Lowry's user avatar
4 votes
0 answers
523 views

What is "JavaGhost - Mass Twilio Checker"?

Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank. The passwords have all ...
Moshe Katz's user avatar
  • 1,360
4 votes
0 answers
380 views

How to indicate that content in an iframe is untrusted

As part of a website I am developing, untrusted content is displayed in a sandboxed iframe. The content is loaded using the srcdoc attribute, but the iframe is sandboxed using sandbox="allow-scripts", ...
firefoxuser_1's user avatar
3 votes
0 answers
1k views

Installing a cocoapod and 'github' asks for login credentials?

I just added a cocoapod and got this >ls Podfile superApp Podfile.lock superApp.xcodeproj Pods superApp.xcworkspace >pod install Updating local specs ...
ray john's user avatar
2 votes
0 answers
107 views

Receiving phishing text messages

I get a phishing messages on SMS every now and then. I'm not sure if it's from anyone that knows me. What information can I get about the sender of the SMS?
Elec Hill's user avatar
2 votes
0 answers
176 views

Guessable oauth client id and phishing

OAuth manual advises that the client ID should not be easily guessable to decrease phishing attacks. https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/ Is it still the case ...
Stanislav Berkov's user avatar
2 votes
0 answers
78 views

Has someone quantified how much more effective typodomains are than random websites in phishing attacks?

Has someone done an actual study on how effective typo domains are versus random websites in phishing links? I am trying to justify the expense of going after typosquatters and the possibility of the ...
Chas. Owens's user avatar
2 votes
0 answers
207 views

Is there a name for creating a malicious subdomain under of legit domains, like XXbadsiteXX.blob.core.windows.net?

This is similar to domain shadowing, but there is no compromise taking place of a registrar account; these sites let users create subdomains. I was wondering if there is a proper name for this kind of ...
DumbFoundder1234's user avatar
2 votes
0 answers
142 views

Why an invisible iframe to logout from Office in a Office phishing?

In a phishing page for Office account (login mimicking the normal login page and stealing the credentials through a simple ajax request, then navigating to a dummy public google doc), attackers have ...
Qortex's user avatar
  • 341
2 votes
0 answers
102 views

Does not using CAS when it's availible encourage phishing?

My (U.S., R1) academic institution uses CAS (Central Authentication Service) to authenticate almost all our web services. However, they don't use CAS for our GitHub Enterprise instance. Instead they ...
lwr's user avatar
  • 121
2 votes
0 answers
156 views

Gmail (Dot) Phishing Attack From Avalanche Botnet

I'm a full-stack web developer working in a small startup and have been wearing many hats as a result. I am by no means a cyber or information security expert. I'm looking for a general evaluation of ...
StressedDeveloper's user avatar
1 vote
0 answers
463 views

I caught myself in the middle of a phishing scam

I got caught up in a phishing scam where I conducted an automated interview with emails that appeared legitimate from real people within my college. I did respond to multiple emails and the only ...
eric's user avatar
  • 11
1 vote
0 answers
87 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
Caleb Faruki's user avatar
1 vote
0 answers
700 views

Yahoo sent folders contains unsubscribe emails (And they aren't from me)

I continue to see emails in my sent folder that I haven't sent. I change my password and it stops for a few days only to return. What could they be? Why would yahoo send unsubscribe emails? Example: ...
Sherry W's user avatar
1 vote
0 answers
491 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
Allsonto's user avatar
1 vote
0 answers
295 views

Phishing/spam websites using the same domain as legitimate websites?

I have found links to an obvious bait website. Link to PHISHING website. However, I was very surprised to see the domain is "holidayinn.com". On first sight this appears to be a genuine ...
username193228's user avatar
1 vote
0 answers
418 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
Youbecks003's user avatar
1 vote
0 answers
123 views

Is it possible for old text messages to be used in an SMS spoofing attempt?

Background The company I work for maintains an application that allows users to subscribe to notifications via SMS or email. SMS messages are sent to the user's SMS gateway as an email. The Issue ...
algernon's user avatar
1 vote
0 answers
89 views

Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?

When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn't show anymore if the certificate is known to ...
Lew Wei Hao's user avatar
1 vote
0 answers
126 views

Find Frequency of Phishing Attacks on Websites

I am trying to do some comparison based on frequency of phishing attacks on different sites. Phishtank lists phishing attack against target websites, but looking at the unknown target data available ...
user's user avatar
  • 11
1 vote
0 answers
212 views

How often does a user type in the "last 4 digits of SSN" in the "last 4 digits of Phone"?

This may sound dumb to a Security pro, but this is about end-users and worst case interaction with a challenge-response. Background Many 2 factor authentication sites request verification of the ...
makerofthings7's user avatar
1 vote
0 answers
792 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
Snake Eyes's user avatar
1 vote
0 answers
347 views

Open redirection unique token bypass

I am currently analyzing one job portal web application in which there is an open redirect vulnerability. Vulnerability description is as follows: Request type: GET Vulnerable Parameter: dest ...
FrOgY's user avatar
  • 329
1 vote
0 answers
842 views

Preventing access to my public REST api from my trusted client application

I own a set of REST APIs and some of them don't require users to be authenticated. Example could be: api/items/index of an e-commerce". Currently, I use Cookie-based tokens from my application, but ...
Mik378's user avatar
  • 431
1 vote
1 answer
483 views

Mindlessly clicked days old phishing email link appeared dead

Was multitasking and mindlessly clicked Squarespace phishing email. Page didn't load, and right away I realized my mistake. Completed several malware scans which came back clean. The button link ...
Joel's user avatar
  • 11
1 vote
3 answers
451 views

Plausible PayPal phishing... with no evidence credentials were stolen

Yesterday my housemate was almost scammed by someone on the internet, or so I thought. She was selling some goods on a ebay-like website, and someone contacted her to buy her stuff. She then received ...
Kaël's user avatar
  • 362
1 vote
1 answer
2k views

Cutting down phishing attacks from AmazonSES

I am trying to work on cutting down on the amount of spam, phishing, and malicious emails coming through via AmazonSES burners. Has anyone devised a method or certain IOCs to block on?
gost45's user avatar
  • 11
0 votes
0 answers
51 views

Phishing mails to hidden Azure mailboxes

After some research, I couldn't find a clear answer: in Azure Cloud Domain, some users received phishing emails to hidden mailbox addresses. How can that be? How can those mailbox addresses be known ...
Loay's user avatar
  • 1
0 votes
1 answer
2k views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
Alpha-Craft's user avatar
0 votes
1 answer
214 views

Spoof email is using my domain name email address but target almost only my contact list with credible content body

Since yesterday, one of my work email addresses is used to send spoof emails with phishing attachments. SPF and DKIM was configured on my domain name but not DMARC, but since yesterday in the evening, ...
morfane's user avatar
0 votes
1 answer
195 views

How can I filter out phishing e-mails containing malware using Gmail?

I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this: 6 5 4 8 2586 8016 70170 2 1 08 05 60 172 01 ...
Mordred's user avatar
  • 193
0 votes
0 answers
121 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
user1709076's user avatar
0 votes
1 answer
393 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
Fit Tony's user avatar
0 votes
0 answers
152 views

What should I do if I'm a victim of phishing attack of my iphone

I received an sms on my iphone informing me from my local delivery company that I have a parcel pending and to click on the link, which I did as the link bought me to my local delivery company home ...
John's user avatar
  • 1
0 votes
0 answers
140 views

Skype for iPhone image/link preview

Today a Skype contact of mine sent me a link in the chat. This link I believe was sent without the person knowing it, and it contains a reference in the URL to my Skype ID, in the form ...tumblr...#...
jj_p's user avatar
  • 359
0 votes
0 answers
106 views

How to detect which app I'm in?

As a user, How to detect which app I'm using? Let's say that I opened application A. Then, Application A sends me a third party Login Activity from Application B. How can I know if I'm typing my ...
Oximer's user avatar
  • 111
0 votes
0 answers
439 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
Wandering Morg's user avatar
0 votes
0 answers
78 views

Security Flaw in all "logging by" system - phishing opportunity

We all face such popups. How can you assure that it's NOT phishing, if It's not in the browser. UIWebView (View that displays this logging view) is controlled by application we really don't even ...
Paweł Brewczynski's user avatar
-1 votes
1 answer
110 views

Whois History resources authentic source

I have couple of doubts related to Whois records. For a particulate domain... How authentic are the Whois records? As per my research the records are not permissible in courts (or at least would ...
Youbecks003's user avatar
-1 votes
1 answer
6k views

People using my email address (and only that) for booking hotels. What kind of scam is this?

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...
NotMyHotel's user avatar
-1 votes
1 answer
12k views

Analyzing Received From header of Phishing Email

Our organization had received a phishing email some time ago. The phishing email was sent from a Compromised account within the organization. On seeing the header of the email, it has following ...
user5155835's user avatar