Conversation

Notices

1. Embed this notice
   Konstantin Weddige (weddige@gruene.social)'s status on Thursday, 04-Apr-2024 13:55:16 JST Konstantin Weddige

   Welcome to another edition of "Is this phishing?"

   Assume the email is in principle plausible and the transaction ID exists. What is the worst that can happen if you press send?

   #phishing

   • Embed this notice
     Konstantin Weddige (weddige@gruene.social)'s status on Thursday, 04-Apr-2024 13:55:13 JST Konstantin Weddige

     in reply to

     This is due to something I call #KoboldLetters. By cleverly (mis)using CSS, attackers can display completely different emails to different recipients.

     The problems with HTML and CSS in emails have been known for a long time, but the security implications have usually been underestimated or actively downplayed. That's why I wrote an article explaining how HTML emails can be used to deceive recipients into becoming part of an sophisticated #phishing attack.

     https://lutrasecurity.com/en/articles/kobold-letters/

   • Embed this notice
     Konstantin Weddige (weddige@gruene.social)'s status on Thursday, 04-Apr-2024 13:55:15 JST Konstantin Weddige

     in reply to

     If your answer was "everything", you were right. Because the email your accountant would receive wouldn't look anything like the one you forwarded.

     Haelwenn /элвэн/ :triskell: repeated this.