Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #243344

Re: Identity Theft

Show all headers | View raw

Le 21/12/2021 à 16:20, Richmond a écrit :
> Jeremy Ardley <jeremy@ardley.org> writes:
> 
>> On 21/12/21 9:59 am, rhkramer@gmail.com wrote:
>>> On Monday, December 20, 2021 02:28:13 PM Brian wrote:
>>>> On Mon 20 Dec 2021 at 10:32:31 -0500, rhkramer@gmail.com wrote:
>>>>> My identity has been stolen, and although it has nothing to do with
>>>> [...]
>>>>
>>>> May we know the URL of the financial website you contacted and the
>>>> help number you phoned.
>>> The website is troweprice.com, and the phone number is 855/654-5324.
>>>
>>> It looks like I didn't record the actual URL that I was on, but I don't think
>>> you could see that exact page in any case as it was an https page and one that
>>> showed my account numbers and balances.
>>>
>>
>> There is a type of attack called cross-site scripting (XSS). It's
>> mostly been eliminated by latest version browsers, but there are
>> always zero-day vulnerabilities.
>>
>> The effect is that if you are vulnerable and have two tabs open, one
>> to the legitimate site, and one to a bad guy site, the bad guy can
>> alter your trusted site and for instance change a valid link into
>> something malicious, or change a displayed phone number.
>>
>> More at https://owasp.org/www-community/attacks/xss/
> 
> That doesn't explain how the phone log showed the correct number had
> been dialled. I suppose it is possible a call was in progress or came in
> at the exact moment that the number was dialled. But then how did the
> number get logged as a call?
> 

One possiblity is that the target (recipient of the call) company 
internal communication network was compromised. That happens quite 
often, not as much as mail servers but it is still not unknown.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Identity Theft rhkramer@gmail.com - 2021-12-20 16:40 +0100
  Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 17:00 +0100
  Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-20 17:20 +0100
    Re: Identity Theft "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org> - 2021-12-20 19:10 +0100
      Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-20 19:40 +0100
        Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 19:50 +0100
          Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 20:00 +0100
        Re: Identity Theft "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org> - 2021-12-20 20:10 +0100
          Re: Identity Theft rhkramer@gmail.com - 2021-12-21 03:00 +0100
            Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-21 06:00 +0100
            Re: Identity Theft Curt <curty@free.fr> - 2021-12-21 17:00 +0100
              Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:50 +0100
                Re: Identity Theft Curt <curty@free.fr> - 2021-12-21 19:50 +0100
                Re: Identity Theft rhkramer@gmail.com - 2021-12-21 20:10 +0100
  Re: Identity Theft Brian <ad44@cityscape.co.uk> - 2021-12-20 20:30 +0100
    Re: Identity Theft rhkramer@gmail.com - 2021-12-21 03:10 +0100
      Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:20 +0100
        Re: Identity Theft local10 <local10@tutanota.com> - 2021-12-21 09:20 +0100
          Re: Identity Theft Kenneth Parker <sea7kenp@gmail.com> - 2021-12-21 13:50 +0100
            Re: Identity Theft Eike Lantzsch ZP6CGE <zp6cge@gmx.net> - 2021-12-21 14:30 +0100
              Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 14:40 +0100
                Re: Identity Theft Tim Woodall <debianuser@woodall.me.uk> - 2021-12-21 15:20 +0100
                Re: Identity Theft Markus Schönhaber <debian-user@list-post.mks-mail.de> - 2021-12-21 16:30 +0100
                Re: Identity Theft Dan Ritter <dsr@randomstring.org> - 2021-12-21 16:40 +0100
                Re: Identity Theft The Wanderer <wanderer@fastmail.fm> - 2021-12-21 16:40 +0100
                Re: Identity Theft Tim Woodall <debianuser@woodall.me.uk> - 2021-12-21 19:20 +0100
                Re: Identity Theft Celejar <celejar@gmail.com> - 2021-12-21 22:40 +0100
              Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 14:40 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:40 +0100
        Re: Identity Theft Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-25 18:10 +0100
          Re: Identity Theft rhkramer@gmail.com - 2021-12-26 14:40 +0100
            Re: Identity Theft Hans <hans.ullrich@loop.de> - 2021-12-27 20:10 +0100
      Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:20 +0100
        Re: vulnerability classifications (was: Re: Identity Theft) Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:50 +0100
        Re: Identity Theft Richmond <richmond@criptext.com> - 2021-12-21 16:50 +0100
          Re: Identity Theft harryweaver@tutanota.com - 2021-12-21 21:20 +0100
          Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 23:30 +0100
            Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 23:50 +0100
            Re: Identity Theft Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-12-22 00:40 +0100
            Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-22 16:00 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:40 +0100

csiph-web