Questions tagged [spoofing]

A kind of attack in which one system, program, or user successfully masquerades as another.

Filter by
Sorted by
Tagged with
13
votes
1answer
2k views

How to protect from caller-id spoofing?

Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim. Please tell me how to protect myself from this prank and is there ...
8
votes
2answers
2k views

Phone call to try and gain access

About a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was "...
8
votes
2answers
2k views

Can an SSH server fingerprint be spoofed?

If I simply connect to an SSH server, get its key fingerprint, and immediately disconnect, does the SSH protocol ensure that the server also had the private key in order to get that far into the ...
9
votes
2answers
77k views

Can I determine actual origin of spoofed text message?

Can I determine the actual sender of a spoofed text message? I received a text message yesterday that appeared to come from one of my contacts, but he did not send it. I contacted my carrier (Verizon) ...
2
votes
1answer
10k views

What is TCP spoofing?

I know about IP spoofing is it the same thing? The question originated from the question Is TCP more secure than UDP?
3
votes
2answers
3k views

WiFi Hotspot's Evil Twin

So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
23
votes
1answer
15k views

How can I spoof a phone call and make it appear to come from another phone?

I'm performing a penetration test against a company. Part of my social engineering procedure is to contact the IT department and try to convince them to that I'm an employee in the company and get ...
5
votes
1answer
38k views

How to track a Spoofed SMS on Iphone

A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
7
votes
1answer
10k views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
2
votes
1answer
500 views

Securely sending packets without them being spoofed

I'm working on a simple multiplayer game to break the ice with network programming. I have a system where if the player moves, the server receives a move packet that contains some stuff like the ...
53
votes
7answers
11k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
20
votes
3answers
126k views

Is it possible to make a phone call appear to come from another phone, even to the network provider?

Quick Question Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
81
votes
1answer
23k views

Is Starbucks spoofing me?

When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this: I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
17
votes
3answers
5k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
11
votes
1answer
23k views

DNS Spoofing vs DNS Cache Poisoning

What is the difference between DNS Spoofing and DNS Cache Poisoning ??? It seems like there are little differences between two attacks, with an exception that DNS server is actually might cache the "...
6
votes
2answers
6k views

Is it possible to un-spoof a spoofed caller ID?

I know that Trapcall allows mobile telephone users to forward their calls to a toll free number, which then forwards them back to the user's telephone, allowing them to see the caller ID. However, ...
8
votes
3answers
2k views

Someone is making random calls spoofing my phone number. What to do?

For the past six months, I've experienced call-backs from foreign numbers (all within the EU) telling me that I had called them earlier. At first, I thought the calls are malicious. However, due to ...
3
votes
2answers
196 views

How can an end-user verify the authenticity of a third-party authentication provider's login form

Given the ubiquitous use of third party authentication providers in web apps today, how can end-users verify the authenticity of the login forms that collect their credentials? What's to stop a ...
2
votes
3answers
4k views

Can iMessages be spoofed?

I am subject to legal proceedings where fake iMessages (not SMS) are being introduced by the opposing party and proclaiming to have come from me. I read about spoofing SMS messages. Is it possible for ...
1
vote
2answers
4k views

Can I spoof my user agent so that the type of device I'm using doesn't show up?

I was looking into spoofing a user agent but all that has come up so far is spoofing the browser type. However I can still see what kind of device I am using (tbh I'm not really even sure why someone ...
169
votes
10answers
41k views

Should I be concerned if the “FBI” has logged onto my Ubuntu VPS?

Yesterday, I was performing a bit of general maintenance on a VPS of mine, using the IPMI console my host provided. Upon setting up SSH keys again via the IPMI console, I logged in via SSH and was ...
31
votes
2answers
111k views

How easy is it really to do IP spoofing? [closed]

I read a lot about IP spoofing but I am not sure how easy it is really to do. Let's say I am in Spain, can I somehow connect to a server in the US with an IP address that is allocated to Mexico? Won't ...
28
votes
2answers
9k views

Why is “hovering over” a link in an email considered safe? Or is it harmful?

We are using a browser based email client and the email content is in HTML. One of my employers told us that if we receive a suspicious email with links, we have to hover over the link (to check ...
11
votes
2answers
84k views

Sniffing, Snooping, Spoofing

Could somebody please explain me the differences between the following attacks? sniffing snooping spoofing My professors used them all in his documents, but I'm not sure, if those are 3 different ...
4
votes
1answer
5k views

TLS Authentication/OpenVPN/MITM Attacks on Public Wifi [duplicate]

My question is about how an SSL VPN connection such as OpenVPN is protected against MITM/Spoofing attacks on a public Wifi. For example, if somebody has a 'pineapple' or router setup as a honeypot ...
14
votes
2answers
2k views

Are SSL browser sessions kept alive across requests?

When a client requests an SSL web resource via a browser (ie: a login request) and then follows up with additional requests are all the requests executed in the same SSL session? Or does the browser ...
4
votes
1answer
37k views

Is there any way to detect caller ID spoofing? [duplicate]

To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
3
votes
3answers
7k views

How to detect & prevent fake emails?

I hope this question not same as this one: E-mail can be made to appear like it came from a big organization? I'm not asking how to protect brands and large organizations (Google, Yahoo, etc.), but ...
2
votes
2answers
606 views

Isolating guest networks

I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network. Initially, I used IP filtering ...
0
votes
2answers
12k views

How can someone spoof texts with my phone number?

A dear friend of mine in the U.S. recently told me that she had been quite hurt by the unkind texts I had sent her after the Holidays. I do not have a texting mobile phone, nor do I do texting from ...
6
votes
3answers
7k views

Which is safer, GSM or CDMA?

I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
4
votes
3answers
777 views

How can spoofing a certain MAC address enable sending probe requests that I was never connected to?

I was wondering how could my computer that uses a spoofed MAC address be sending probe requests for APs that I was never connected to? Note:- The other computer with the original MAC address was ...
4
votes
2answers
2k views

How to protect from WPAD attacks?

If you are in a Windows network, and you basically connect to a website ; And there is an attacker on Linux who changes the hostname to WPAD and configures WPAD.dat in his system, all your PC's ...
4
votes
2answers
2k views

Can you force your PC or device to use only DNSSec-verified lookup results?

Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.) Well, I certainly ...
3
votes
1answer
2k views

What is setuid based script root spoofing?

I'm reading this and I'm little confused. What exactly is this setuid based script root spoofing?
2
votes
1answer
22k views

Suspicious text received from my # but I did not send it - is there definitely a virus involved, and if so who has it, the sender or receiver?

A close friend texted me this morning asking if I meant to send that last text, noting it was suspicious. I asked for a screenshot of the text in question, and it is a text from my number with spam I ...