New answers tagged phishing
2
votes
Is FIDO2 authentication vulnerable to a social engineering replay attack?
I found the detail I was missing in this answer.
The TL;DR explanation (as I understand it anyway) is U2F devices can generate and store keys one of two ways
Generate and store separate keys and key ...
2
votes
Accepted
How to hunt for phishing websites?
Your best bet is Certificate Transparency logs. These can give you a stream of all HTTPS certificates in almost real-time as they are issued which you can then run your analysis on the domains they're ...
1
vote
How to deal with these legit-looking major-company phishing emails?
What's the solution to these?
The best practice hasn't changed:
Don't use links in the email/SMS/whatever
Visit the official site yourself, using either:
your own saved bookmarks (best)
launching ...
Top 50 recent answers are included
Related Tags
phishing × 530email × 120
malware × 44
email-spoofing × 37
spam × 31
authentication × 28
social-engineering × 26
scam × 22
gmail × 19
passwords × 17
url × 17
web-browser × 15
google × 15
web-application × 14
javascript × 14
spoofing × 12
url-redirection × 12
sms × 12
chrome × 11
virus × 10
account-security × 10
websites × 10
tls × 9
certificates × 9
attacks × 9