Questions tagged [spoofing]
A kind of attack in which one system, program, or user successfully masquerades as another.
290
questions
171
votes
10
answers
42k
views
Should I be concerned if the "FBI" has logged onto my Ubuntu VPS?
Yesterday, I was performing a bit of general maintenance on a VPS of mine, using the IPMI console my host provided.
Upon setting up SSH keys again via the IPMI console, I logged in via SSH and was ...
- 1,551
82
votes
1
answer
24k
views
Is Starbucks spoofing me?
When I connected to Starbucks's Wi-Fi, I got a security alert from MS Outlook that looks like this:
I looked up secure.datavalet.io, but there's no mention of this thing anywhere. This does not ...
- 799
58
votes
7
answers
12k
views
How can caller ID be faked?
My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
- 549
47
votes
4
answers
21k
views
Someone called someone else with my phone number
Sequence of events:
I didn't touch my phone all day (at work, busy day, know it didn't even come out of my pocket, but was on).
5:20pm I get a call by a guy asking me who I am and why I called him at ...
- 523
41
votes
4
answers
7k
views
How could a public DNS server return bad results?
I live in a country which is under many sanctions. Both internal sanctions (government on people) and external sanctions (US on our people).
In our country, YouTube, Twitter, Facebook and many other ...
- 499
41
votes
2
answers
152k
views
How easy is it really to do IP spoofing? [closed]
I read a lot about IP spoofing but I am not sure how easy it is really to do. Let's say I am in Spain, can I somehow connect to a server in the US with an IP address that is allocated to Mexico? Won't ...
- 587
36
votes
5
answers
41k
views
Is it possible to spoof an IP address to an exact number? [closed]
The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
- 463
28
votes
2
answers
12k
views
Why is "hovering over" a link in an email considered safe? Or is it harmful?
We are using a browser based email client and the email content is in HTML.
One of my employers told us that if we receive a suspicious email with links, we have to hover over the link (to check ...
- 2,317
28
votes
2
answers
45k
views
List of visually similar characters, for detecting spoofing and social engineering attacks
I'm trying to detect homograph attacks and other attacks where an attacker uses a spoof domain name that looks visually similar to a trusted domain name (e.g., bankofthevvest.com instead of ...
- 99.1k
26
votes
5
answers
2k
views
Bank asked for a cross login?
I was creating a new bank account here in the US at HSBC's popular online bank...
You know the step where you have to verify the account you're sending from, by receiving two small test payments?
I ...
- 263
25
votes
3
answers
5k
views
How wise is it to use a tool for portspoofing at your server to confuse attackers?
I came across this tool recently https://github.com/drk1wi/portspoof
How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
- 365
24
votes
1
answer
17k
views
How can I spoof a phone call and make it appear to come from another phone?
I'm performing a penetration test against a company. Part of my social engineering procedure is to contact the IT department and try to convince them to that I'm an employee in the company and get ...
- 43.9k
23
votes
6
answers
7k
views
How to be mean to some people that stole my phone [closed]
My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone:
The URLs are:
https://apple.inc-view.us/...
- 359
20
votes
3
answers
137k
views
Is it possible to make a phone call appear to come from another phone, even to the network provider?
Quick Question
Is it possible that I could call a mobile number, but have the call forwarded through another number active on a different phone that someone else has? I have had unlimited access to ...
- 1,019
18
votes
3
answers
6k
views
Somebody is spoofing my email to send spam messages, and I have no idea how to block
Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails.
I have no idea how to block this because the spammer is also using my email ...
- 289
17
votes
1
answer
3k
views
How to protect from caller-id spoofing?
Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim.
Please tell me how to protect myself from this prank and is there ...
- 305
16
votes
2
answers
4k
views
Are SSL browser sessions kept alive across requests?
When a client requests an SSL web resource via a browser (ie: a login request) and then follows up with additional requests are all the requests executed in the same SSL session? Or does the browser ...
- 311
15
votes
3
answers
21k
views
How does SMS spoofing work practically?
I have been researching the web for information on how I can spoof an SMS myself, but I seem to find more on how to detect it, or how to use tools to do it rather on how to do it myself.
I have tried ...
- 151
15
votes
2
answers
4k
views
How does Google Analytics prevent fake data attacks against an entity's traffic?
In order to register a "hit" on Google Analytics, the list of things required are:
Unique API key(s) for Google AnalyticsPublic: can be gotten from the embedded JavaScript files on the pages for ...
- 672
14
votes
3
answers
18k
views
Is hacking Wi-Fi THAT easy? (just spoof, and it's hacked?)
Suppose I have a Wi-Fi with WPA and strong password. Some articles say, that if an attacker will create a Wi-Fi with my SSID and it's signal is stronger than my, then my computer will connect to his ...
- 243
13
votes
2
answers
98k
views
Sniffing, Snooping, Spoofing
Could somebody please explain to me the differences between the following attacks?
sniffing
snooping
spoofing
My professors used them all in his documents, but I'm not sure, if those are 3 ...
- 233
13
votes
2
answers
105k
views
Can I determine actual origin of spoofed text message?
Can I determine the actual sender of a spoofed text message? I received a text message yesterday that appeared to come from one of my contacts, but he did not send it. I contacted my carrier (Verizon) ...
- 131
12
votes
1
answer
26k
views
DNS Spoofing vs DNS Cache Poisoning
What is the difference between DNS Spoofing and DNS Cache Poisoning ???
It seems like there are little differences between two attacks, with an exception that DNS server is actually might cache the "...
- 223
12
votes
1
answer
2k
views
Did somebody try to spoof my wifi network?
I am traveling on a train in Switzerland, working on a macbook connected to a wifi hotspot that I've set up on my Phone [1] using WPA2.
At some point along the journey, the internet connection drops. ...
- 242
11
votes
4
answers
4k
views
Spam email "via" my domain, but SPF record exists
I just got an email from some random person's name "via" info@mydomain.com, although info@mydomain.com is just a distribution group within G Suite.
We have an up-to-date SPF record added from Google, ...
- 223
11
votes
2
answers
4k
views
dnsspoof not spoofing (requests and forwards real DNS packet)
I was trying to use dnsspoof but it did not work as expected. These are the steps I followed:
Set IP forward in kernel to 1
arpspoof -i eth0 -t 192.168.1.39 -r 192.168.1.1 and arpspoof -i eth0 -t 192....
- 466
10
votes
1
answer
13k
views
802.11w protected management frames - Wi-Fi
I've been reading about protected management frames, introduced in 802.11w, and had a few questions.
Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
- 497
10
votes
3
answers
4k
views
Someone is making random calls spoofing my phone number. What to do?
For the past six months, I've experienced call-backs from foreign numbers (all within the EU) telling me that I had called them earlier. At first, I thought the calls are malicious. However, due to ...
- 131
9
votes
2
answers
4k
views
Can an SSH server fingerprint be spoofed?
If I simply connect to an SSH server, get its key fingerprint, and immediately disconnect, does the SSH protocol ensure that the server also had the private key in order to get that far into the ...
- 93
9
votes
2
answers
514
views
WPAD name collision attack victim: possible information leak
This is a home network: a wireless Linksys router serving around 5 wireless devices and 3 wired ones, two PCs and a PS4.
The router is setup to serve DHCP to client devices. It has a setting to ...
- 193
8
votes
3
answers
4k
views
Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?
Assume that I never check the server fingerprint when logging in to an SSH server. This means that certain configurations of SSH can be impersonated. For example, I can log into a server that only has ...
- 389
8
votes
2
answers
2k
views
Phone call to try and gain access
About a hour ago I received a call from a suspicious phone number. They explained that they had received an alert from my PC and needed to gain access to correct the problem before my PC was "...
- 1,049
8
votes
2
answers
3k
views
Spoof IP address after a TCP handshake
I know it is not possible to perform a successful TCP Handshake with a spoofed IP-Address.
However I wonder:
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For ...
- 183
8
votes
5
answers
7k
views
Defending against wifi spoofing
Since a few weeks, someone is regularly running a wifi network copying the SSID and BSSID of my private router, resulting in some anoyance, due to being kicked out of my own network from time to time....
- 181
8
votes
2
answers
302
views
Does iPhone home button act as Secure Attention Key?
On an iPhone, does pressing the home button act as a Secure Attention Sequence?
The home button is a physical button. You can press the home button whereever you are and go back to the home screen. ...
- 99.1k
7
votes
3
answers
26k
views
I'm getting spam e-mail...from myself?
I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
- 523
7
votes
1
answer
2k
views
If I know a currently working exploit to spoof SMS on a major carrier, what should I do? [closed]
This currently works on all iPhones and one known android phone as of today, a formal complaint has been filed with the carrier and the FCC. I doubt they will do anything about it though since this is ...
- 181
7
votes
1
answer
720
views
Do major ISPs still ignore IP spoofing?
I was reading this question:
Why don't ISPs filter on source address to prevent spoofing?
and based on those answers, ISPs ignore it because of the overhead of checking for spoofing.
But that ...
- 388
7
votes
2
answers
5k
views
Can you force your PC or device to use only DNSSec-verified lookup results?
Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.)
Well, I certainly ...
- 2,715
6
votes
1
answer
1k
views
How Concerning Is This X-CU-modified: FAKECU Text Attack?
A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
- 163
6
votes
3
answers
8k
views
What are the security implications of net.ipv4.conf.eth0.route_localnet=1 / route_localnet?
sudo sysctl -w net.ipv4.conf.eth0.route_localnet=1
What are the security implications of route_localnet?
- 744
6
votes
2
answers
487
views
Have both my email address and IP been spoofed, or has someone gotten my password, or...?
Just examined a spam email sent to me. The header's "originator" has both my email address and my web site's IP address, (my SMTP). My first thought is that someone has obtained my email password ...
- 61
6
votes
3
answers
977
views
What if the Google account login screen is spoofed [duplicate]
I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example -
My concern is that an app could be spoofing this whole ...
- 171
6
votes
2
answers
16k
views
Is it possible to un-spoof a spoofed caller ID?
I know that Trapcall allows mobile telephone users to forward their calls to a toll free number, which then forwards them back to the user's telephone, allowing them to see the caller ID. However, ...
- 185
6
votes
1
answer
41k
views
Is there any way to detect caller ID spoofing? [duplicate]
To be specific the main problem is that I want to detect if the caller ID of the incoming cal I get is real or spoofed? Most VoIP servers now allow their clients to use any caller ID they want. Also, ...
- 71
6
votes
1
answer
654
views
How could malicious code changes in a GitHub pull request be masked by an attacker?
When viewing a pull request on GitHub (or the equivalent on any other platform), the web interface displays a diff of the changes for you to review.
Reviewing the diff is obviously vulnerable to ...
- 435
6
votes
3
answers
8k
views
Which is safer, GSM or CDMA?
I have read in the past (no sure where) that unfortunately there exist illegal devices that permit crooks to eavesdrop on GSM mobile phone conversations. I recently also heard that some people had ...
- 207
6
votes
1
answer
4k
views
How to reject e-mails spoofing your own domain targeting your employees at Office365?
One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
- 905
5
votes
1
answer
45k
views
How to track a Spoofed SMS on Iphone
A mate pulled a quality prank on me the other day by sending me a SMS via a Spoofed number. He's bought a SMS gateway and can set the message ID/phone number to be 'God' (or whatever he wants(letters ...
- 11.5k
5
votes
2
answers
6k
views
What happens when a spoofed source IP packet is dispatched out of a private network with NATing
Suppose as an attacker i want to carry out a Ping or SYN Flood attack..
I can change the source IP of the packets generated at my machine to a false/spoofed public IP address so that replies go to ...
- 151