#phishing

@FTM_nl@social.ftm.nl schreef:

Het nadeel: het moet daarvoor toegang hebben tot ongelofelijk veel gevoelige gegevens.

Dat moet niet; Cloudflare zou ook (als een soort router) versleuteld https netwerkverkeer kunnen uitwisselen tussen browsers van bezoekers en de uiteindelijke servers.

Cloudflare is één van de bedrijven die https gesloopt heeft. Daarnaast verdient Cloudflare aan cybercrime.

Voorbeeld: de hieronder getoonde phishingwebsite (nu live, zonder phishing-waarschuwing) is de zóveelste in een schier eindeloze reeks van nepwebsites die door Cloudflare volledig worden geanonimiseerd. Cloudflare reageert traag of niet op meldingen en neemt vervolgens onvoldoende maatregelen.

Veel van de in mijn draad https://todon.nl/@ErikvanStraten/116274275041117317 genoemde nepsites verstoppen zich achter Cloudflare.

#CloudflareIsEvil #BigTechIsEvil #DVcerts #Phishing #InfoSec #CyberCrime

I fell for the Booking.com WhatsApp scam today. There has apparently been a #databreach at #bookingcom, which provides a little bit of truth to this "please verify your credit card now" scam. They knew my name, my phone number, the hotel I was staying at and the exact dates. That, a little bit of time pressure and a potential quick solution got me. I managed to complete the flow once, which according to them would only reserve the money. Something failed and I tried again. This time they were asking me to confirm the balance of my account for verification, and that finally triggered the alert for me. I'm retrospect, the originating WhatsApp number was located in Brazil (which was not where I was going). The name didn't match the name of the Hotel representative in the message, and the website's title was Booking.com, which didn't match the actual host name in the URL. I didn't notice. Approach shit like this calmly and don't let people push you to rash decisions. #Phishing #scam

⚠️ #SW_ISAC_ADVISORY A series of ongoing phishing campaigns are actively targeting people using fake verification and support accounts. Admins will never contact you publicly for verification or access issues. Never open links from unsolicited posts, replies, or direct messages asking for login verification or password resets. Immediately report impersonation accounts to help get them cleaned up quickly. Please boost for visibility. #Phishing #Impersonation

I've just received one of those 'ᴏᴜʀ ᴀᴜᴛᴏᴍᴀᴛᴇᴅ ꜱʏꜱᴛᴇᴍꜱ ᴅᴇᴛᴇᴄᴛᴇᴅ ᴀ ᴍɪɴᴏʀ ɪʀʀᴇɢᴜʟᴀʀɪᴛʏ ᴡɪᴛʜ ʏᴏᴜʀ ᴀᴄᴄᴏᴜɴᴛ ᴀᴄᴛɪᴠɪᴛʏ. ᴛᴏ ʀᴇꜱᴛᴏʀᴇ ꜰᴜʟʟ ᴠɪsɪʙɪʟɪᴛʏ ᴀɴᴅ ᴀᴄᴄᴇꜱꜱ, ᴘʟᴇᴀꜱᴇ ᴄᴏᴍᴘʟᴇᴛᴇ ᴛʜᴇ ᴠᴇʀɪꜰɪᴄᴀᴛɪᴏɴ ᴘʀᴏᴄᴇꜱꜱ.' messages. If you see one of these, it is DEFINITELY a #phishing attack. Mastodon does not have 'automated systems' to do this. You should report it immediately. Edited: and immediately after, I received a second, identical. Looking at the bot activity, it's targetting pro #Palestine activists.

Possible Phishing 🎣 on: ⚠️hxxps[:]//facebook-pi[.]blogspot[.]com 🧬 Analysis at: https://urldna.io/scan/6abae37f3b775000027ea9a3 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//dainty-cajeta-16e448[.]netlify[.]app/ 🧬 Analysis at: https://urldna.io/scan/6abac1133b77500008cabba6 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//saps[.]casaleciarrocca[.]it 🧬 Analysis at: https://urldna.io/scan/6aba88d03b7750000769e16b #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//facebookloginapp[.]blogspot[.]com/?m=1 🧬 Analysis at: https://urldna.io/scan/6abadd3b3b775000027ea960 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//lnkd[.]in/d_KQpmtx 🧬 Analysis at: https://urldna.io/scan/6abaeb2a3b775000027eaa0e #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//sustained-branding-892825[.]framer[.]app/ 🧬 Analysis at: https://urldna.io/scan/6abac74b3b775000027ea79e #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//app-facebook[.]blogspot[.]com 🧬 Analysis at: https://urldna.io/scan/6aba0a3a3b775000090b691b #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//metameaslogiz[.]gitbook[.]io/us 🧬 Analysis at: https://urldna.io/scan/6aba3ad13b775000090b6f52 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//amazon-clone-f73c[.]panda[.]new 🧬 Analysis at: https://urldna.io/scan/6aba029c3b7750000655f306 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//facebook-pt[.]blogspot[.]com/?m=1 🧬 Analysis at: https://urldna.io/scan/6ab9fc3c3b77500003b9c092 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxp[:]//register-facebook[.]blogspot[.]com 🧬 Analysis at: https://urldna.io/scan/6ab921663b77500006403cbc #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//ionos[.]serve-lad[.]eu/Kundenkonto[.]html 🧬 Analysis at: https://urldna.io/scan/6ab999aa3b775000090b6102 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//instagramreeldownloder01[.]blogspot[.]com 🧬 Analysis at: https://urldna.io/scan/6ab8ff1d3b77500002ba4f32 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//gbtksnerkdfnhsn[.]weebly[.]com 🧬 Analysis at: https://urldna.io/scan/6ab9b5d73b77500007b66b52 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//facebook-facebook[.]blogspot[.]com/?m=1 🧬 Analysis at: https://urldna.io/scan/6ab929233b77500005999c26 #cybersecurity #phishing #infosec #urldna #scam #infosec

Possible Phishing 🎣 on: ⚠️hxxps[:]//facebookloginpage1[.]blogspot[.]com 🧬 Analysis at: https://urldna.io/scan/6ab9294e3b77500003e18121 #cybersecurity #phishing #infosec #urldna #scam #infosec