Search the Community

Am I being paranoid. This afternoon I got an email to one of my not so regularly used email address from an old manager that use to contact me via that older email address. I still do talk to this person just during the winter due to career field. Without really looking to much into it I opened the email and clicked the link. The second I clicked the link chrome informed me that the site I was trying to access was not secure. Once I saw this, I backed out immediately and took a closer look at the email. No, I did not continue to the site. The sending email is not the correct email, the link is some random site that supposedly does image sharing. Either way I just need to know, does chrome block any/all activity to the unsecure site on my end unless I continue to the site itself, or is there damage already done.

Hey, Going back to the Cyber Security Scene of 2012-2015(A refreshing trip down memory lane, ain't it?), SMS Spoofing Was a popular choice of attackers, mostly through the Social Engineering Toolkit(SET). So, what happened that it is now deemed as "no longer possible" or "we don't do that here, kid" thing? Thanks For Reading.

In an event that was over very shortly after it began, an email phishing scheme that would request access to your Google Docs, then rip out all of your contacts to replicate itself was swiftly dealt with after a Google staff member noticed a trending topic on the Google reddit thread. From Ars Technica: https://arstechnica.com/security/2017/05/google-docs-phish-worm-grabs-your-google-app-permissions-contacts/ As for how this issue was resolved, Bleeping Computers Article: https://www.bleepingcomputer.com/news/security/it-took-google-one-hour-to-shut-down-massive-self-replicating-phishing-campaign/ There are no reports that malware was deployed in the phishing attack. Cloudflare was also quick to take down all the domains associated with the phishing attack. Users that clicked on the button inside the phishing email can go to the https://myaccount.google.com/permissions page and see if they granted the app permission to access their account. The real Google Docs isn't listed in this section, as it does not need permissions, being an official Google property. It is good to see that Google's security team was quick to annihilate this worm as opposed to allowing it to roam in the wild for any length of time. UPDATE: In an update on the security vulnerabilities used to create the malicious phishing script, it appears that this type attack may have been known about since late 2011 and that there may not be anything in place to prevent this kind of attack in the future... Ars Technica has provided a bit more information on how the attack was accomplished and how the fact that Google's own authentication API doesn't provide a way to make it clear the applications author is not associated with Google may also be partially to blame. In addition, some of the ideas and scripting behind this attack may have been inspired by a security researchers blog post in February to try and raise awareness of this security vulnerability... https://arstechnica.com/security/2017/05/google-phishing-attack-was-foretold-by-researchers-and-it-may-have-used-their-code/ This seems like a fairly serious issue that Google is going to need to figure out a long-term fix for concerning OAuth attacks mimicking Google authorization...

If it can happen to Google and Facebook - cyber crime and fraud can happen to anyone. A French company was duped out of millions of Euros in the last few years by an Israeli-French linked cyber criminal group posing as company directors and telling the department payment controllers this was part of some 'super secret acquisition'. Consumers are not immune either and the criminals are using spear-phishing tactics to go after high net worth individuals or the lower worth - purely to slave computers. US$100 million is something else though. Its relevant as these companies have customers they're supposed to be protecting. Notice what they say though. PEOPLE are the biggest security defence you can have. People are the ones that can undermine their own security. I think computer security issues should be taught in schools. QUESTION EVERYTHING. If its too good to be true - it usually is - so check. Source: BBC News - 28th April 2017 URL: http://www.bbc.co.uk/news/technology-39744007

This tool named Modlishka is a reverse-proxy that can intercept your login and your Two-Factor-Authentification (like the method used with the popular Google Authenticator) to give attackers access to your protected accounts. Several german websites were reporting information about this tool: German: https://www.golem.de/news/modlishka-phishing-tool-umgeht-zwei-faktor-authentifizierung-1901-138674.html https://www.zdnet.de/88351325/tool-hebelt-zwei-faktor-authentifizierung-aus/ https://winfuture.de/news,106885.html English: https://www.theinquirer.net/inquirer/news/3069049/2fa-bypassing-tool-modlishka-is-on-github-for-all-to-use This tool is on github in the open now, so it can be used by everybody to create great phishing sites: https://github.com/drk1wi/Modlishka The argument of the author is - according to zdNet.de - , that without making this public, nobody would change the current process or even think about another, maybe better solution. The only way to not being hacked this way is to always check the URL and certificate of the website you're typing your data into, which can be tricky when you only get a small browser window without a visible URL to log in and some apps don't present the URL or certificate at all. A way around this is to use a hardware dongle that supports U2F for example, but these are not very convenient and cannot be used with all devices. Never feel too safe, questargon P.S.: This is NOT a new flaw, as pointed out below. It just makes it easier for third parties ("script kiddies") to exploit this vulnerability.

I've been getting a lot of phishing schemes lately, both view email and text. What's going on? Has anyone else noticed an uptick? I try to only put my phone and email on websites I trust. Here's a picture of the best one I recurved via text.

I just received an email from something that claims to be Apple about a charge for $55.99 for PUBG coins on an account I barely remember making back when I needed one for work. I damn-near threw up when I saw how much money some poor hacker was wasting on a phone game. Anyways, it doesn't actually say what the account name is or give a transaction ID, and the notice/receipt came as a PDF which I've never experienced before. I'm fairly certain the link in the email is fraudulent and wants to steal muh info. Has anyone else gotten this, or can at least confirm that this is what an apple recipe looks like? (As void of features, info, and end user freedom as their products). I haven't gotten a charge yet to any of my accounts by the way.

So.....congrats to LTT being big enough for those sneaky cucks. Plus, last I checked LTT did not hand out 50$ Amazon's cards... Nice try lols

so basically I saw that some days ago and it's becoming a thing so I'm posting it here so people will see it and hopefully avoid this kind of crap (it's on almost every ltt video and I don't know why it as not been removed) . this seems like a very elaborate phishing technique since the person have subscriber and many like. But if there is a rule on the internet it's nothing is free

Deemed the/a "Mini Virus" or a "Steam Virus", this phishing scam works by sending links disguised as photo sharing sites, links to actual images, links to screensavers, and similar things to those mentioned, These links originated at a Steam profile named "oneonlyonekey", a profile some believe is owned by a man named Alex Star, although that's probably a fake name. One of the files can be reported here, and you can report the profile by the normal way (going through the Report method on Steam) with the link provided. Clicking on the link itself isn't what will do the damage due to the fact that Java (which hasn't been exploited for five hundred plus days and counting) is used in the process, and means that a website can't immediately run a downloaded file without a popup appearing making you aware of all possible results and their consequences - more info can be found on the Google help page. If you run the file - wether it be a screenshot ('.scr'), image ('png','jpg','jpeg',etc) or other file, then it will be able to do it's work. Some effects have been described as "trading all items in your Steam Inventory to another profile" (possibly the profile linked above) after taking your Steam credentials. if you have downloaded this file by clicking on the link and have not run it: Delete it. Empty your recycle bin. Run your Anti-Virus and Anti-Malware software and quarantine/delete anything evident, although whatever it finds - again, if you have not ran this file - probably isn't related. if you have downloaded this file by clicking on the link and have ran it: Delete it. Empty your recycle bin. Run your Anti-Virus and Anti-Malware software and quarantine/delete anything evident. Change your Steam password using another computer in your home, or even more securely on a Wireless 2G/3G/HSPDA/HSPDA+/4G/LTE network for your mobile phone. if you have downloaded this file by clicking on the link and have ran it; but also have the cash, time, and download speed (to get all your games/programs back): Format your hard drive(s). Reinstall Windows (or another OS).

"The Samsung Galaxy S4 might come with a large number of new features, but it seems that one of the new features contains a serious smishing (SMS phishing) flaw. Samsung's "cloud backup" feature was found to be improperly secured, and can exploited by malicious software to send fraudulent or fake SMS messages while pretending to be the identify of any contact or organization, without the owner of the phone realizing. This exploit was discovered by Chinese Internet security firm Qihoo. According to Qihoo, Samsung has already been notified of this issue, and is already in the process of fixing the issue. Qihoo also added that users can avoid being exploited by this vulnerability by turning off the "cloud backup" feature when it's not being used. A temporary fix has also been made by Qihoo 360, and can be deactivated once the security flaw has been patched. Current Samsung Galaxy S4 users of Qihoo's latest Android app are protected against this exploit. " Link: http://www.hardwarezone.com.sg/tech-news-serious-smishing-vulnerability-discovered-samsung-galaxy-s4 my take: Samsung has been notified and is going to fix the problem... how will this affect their reputation? i don't know but just satisfied i chosed the HTC One over Sammy's S4. It's great that samsung is going to fix this problem as this can seriously affect their users. most probably it would be fix through over-the-air firmware update.