Profile picture
, 8 tweets, 3 min read
Ok, another novel phishing game is in town. I got a text message saying that I was eligible for an IT refund of seventy thousand-odd rupees and asking me to submit a formal request in a link provided in the message. Don't miss the official-sounding ID of the sender...1/n
Since the message came twice in a span of four days, I decided to check where the link led me to....and this is where it took me....a replica of the IT dept site...2/n
I decided to explore further and click on the bank link....I chose SBI and this is where it led me...a fake home page of SBI asking me to enter my user name and password!!!! 3/n
I went back to test another bank link again and clicked on the suspicious-sounding "All Corporate A/C & other banks not listed above"(underlined)...and where did it lead me to?...4/n
It led me to no less than a fake of the RBI's own home page and the page asked me to input details of my internet banking ID, password etc. What's more, there's also an undertaking by "RBI" that it will take full responsibility for securing my IT refund!!! 5/n
Friends, please be warned. Will the concerned authorities please investigate this audacious phishing attempt? @FinMinIndia @nsitharaman @RBI @TheOfficialSBI @chennaipolice_
This is the image for the link that led me to the fake RBI site....
And here's the fake RBI home page....
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Raghuvir Srinivasan

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related threads

Profile picture
Jake
@JCyberSec_
:: Phishing Admin Panel Hunting Thread ::

In this thread we will find ways to hunt and attribute phishing admin panels.

This is a continuation from my #phishing hunting thread released earlier this year. ()

Please retweet to knowledge share among others.
Firstly we need to understand what an admin panel is in relation to phishing sites. There are many phishing-as-a-service (PaaS) offerings for threat actors to buy allowing them to quickly and easily deploy kits online. They normally consists of a threat actor buying an API key.
In this thread I will show you how to fingerprint some of the major panels, if you feel I have missed any let me know as I would love to keep this thread current and up-to-date on new threats.
Read 18 tweets
Profile picture
Jake
@JCyberSec_
:: Phishing Hunting Thread ::

This is a thread about how to hunt and find #Phishing sites.
Retweets would be great to help spread the knowledge and please add your own techniques, ideas and suggestions.

Let's go hunting!
Firstly we need a site to use as a pivot. I have attached a number of sources at the bottom of this thread. For demonstration purposes we will use this site ::

hxxp://www.new.froid-guyader.fr/libraries/sharepointcontract/

This is a #Phishing site against Microsoft Office
Initially let's see if there is a #PhishingKit or #OpenDir on the domain. Enumeration on the domain is important. This is a example of sites to load and see ::

- hxxp://www.new.froid-guyader.fr/libraries/
- hxxp://www.new.froid-guyader.fr/
- hxxp://www.froid-guyader.fr/
Read 15 tweets
Profile picture
Porpentina (Tina)
@porpentina2017
With the 2020 elections coming on strong already, I think it is important to talk about keeping yourself safe from "hacking".
When you think of hacking, most envision someone using a computer & complex code to break into your computer.
#CyberSecurity
/1
#Hacking can take many forms, many can be done done over the phone or through email messages. These scams are known as #Phishing.
Example: A phone call where someone asks you for information that are common security questions:

Your first car
Mother's maiden name
Birth City
/2
They might pretend to be from your bank, your email or internet service provider, or your mortgage lender. They might pose as someone looking to verify your identity because of "unusual activity". This can come many ways, e.g. via a phone call, text message or email.
/3
Read 13 tweets
Profile picture
jia cant tweet atm • chanbaek au 📌
@chokegiwhy
chanyeol and his four-year-old daughter naeun have been celebrating the last two christmases with no one else but the two of them.

chanyeol is planning to celebrate this year's christmas with naeun's uncles (chanyeol's best friends) but naeun is planning something else.
"daddy~ our christmas break will be in a few days." naeun cheered from the passenger seat while chanyeol was putting on her seatbelt.

"really? that means daddy could finally take you to the arcade." chanyeol told her daughter with the same cheery tone.

"yes & we'll eat a lot!"
"we will." chanyeol promised. the car engine roared & the two were off to naeun's school.

naeun is in kindergarten & she goes to a school a bit far from their house but closer to chanyeol's workplace. as soon as she finishes school, chanyeol picks her up & brings her to his work
Read 235 tweets
Profile picture
Jeff @ themarketswork
@themarketswork
1) Quick run-through of IG Text Report

Report of Investigation: Recovery of Text Messages From Certain FBI Mobile Devices
oig.justice.gov/reports/2018/i…
2) OIG initiated investigation in Jan 2018 after being notified of gap in text message data collection from Dec 15, 2016-May 17, 2017
3) Stzok & Page had S5 initially and were later issued S7. All four devices were provided to OIG in late January 2018.
Read 17 tweets
Profile picture
x0rz
@x0rz
This is how bad guys can reset (and later resell) your stolen iPhone. The average Joe stands *no chance*, here is why (Thread)
This is a recent text message someone provided to me.
You receive a message from "Apple" to your recovery phone. In your native language, perfectly spelled. This looks legit, and you're happy because you might have a chance to get back your lost phone, right?
Domain name looks like an official icloud service, you know how this ends for most people. This is a very simple #phishing, yet very effective.
Read 5 tweets

Trending hashtags

#Murdoch #Hillary #Iranians #KIDS4TRUMP #American #ThreadnoughtBingo #makeAmericagreatagain #socialmedia #Iraq #SaudiCoalition #HoboLawyer #tennessee #dead #QTNA #BOOM #September11th #FearTheBeard #6ixNine #GenieOil #TweetTheMuellerReport #ISWVBingo #googleadwords #voted #LOLwut #Gaza
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!