New answers tagged phishing
2
votes
Is FIDO2 authentication vulnerable to a social engineering replay attack?
I found the detail I was missing in this answer.
The TL;DR explanation (as I understand it anyway) is U2F devices can generate and store keys one of two ways
Generate and store separate keys and key ...
- 835
2
votes
Accepted
How to hunt for phishing websites?
Your best bet is Certificate Transparency logs. These can give you a stream of all HTTPS certificates in almost real-time as they are issued which you can then run your analysis on the domains they're ...
- 36
1
vote
How to deal with these legit-looking major-company phishing emails?
What's the solution to these?
The best practice hasn't changed:
Don't use links in the email/SMS/whatever
Visit the official site yourself, using either:
your own saved bookmarks (best)
launching ...
- 760
Top 50 recent answers are included