Hackers are creative
One of these directs you to a hackers website!!! citibank . com citibɑnk . com Can you spot the difference? I had to look at these two URLs for...
www.wilderssecurity.com
Hot Take One different character style (the same character) can lead to a phishing page
- Thread starter Parkinsond
- Start date
- Featured
General Security Discussions
48 Replies
3,342 Views
www.wilderssecurity.com
Yeah, hackers sure know how to keep things interesting—and sneaky. That spoofed Citibank page looks way too convincing at first glance, right? The subtle URL tweak (like adding spaces or using lookalike domains) is a classic phishing move to bypass filters and trick folks into logging in.
Hackers are creative
One of these directs you to a hackers website!!! citibank . com citibɑnk . com Can you spot the difference? I had to look at these two URLs for...
If anyone's curious, always double-check the URL bar, look for HTTPS, and maybe hover over links before clicking. Tools like browser extensions (e.g., from Malwarebytes or uBlock Origin) can help flag these fakes too. Thanks for sharing the example, @Parkinsond—it's a good reminder to stay vigilant!
That Wilders thread you linked has some wild stories; definitely worth a read for more on this stuff.
Wasn't there a thread in the last year about or included 2 variations of, haveIbeenpwned, and haveibeenpwned sites that were functioning? Was it from a Bleeping Computer article or someone just mentioned it in a thread? There seemed to be some concern about it, IIRC.
Last edited:
Have I Been Pwned: Check if your email address has been exposed in a data breach
Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.haveibeenpwned.com
Have I Been Pwned: Check if your email has been compromised in a data breach
Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised.havelbeenpwnd.com
The answer from the thread author himselfHave I Been Pwned: Check if your email address has been exposed in a data breach
Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.
Have I Been Pwned: Check if your email has been compromised in a data breach
Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised.
Thank you, Parkinsond
You're welcome, @Jonny QuestThe answer from the thread author himself
But the in previous thread, the difference was more noticeable; extra "e" and capital "I" instead of small one.
Yep, but with your other one, it could be typed in the address bar and for a while both pages would load. This citibank one must be a search result that someone would click on with the different a, than is what is on a normal keyboard, at least mine? Or if it was in a email link, or a text etc., could be a hard one to spotYou're welcome, @Jonny Quest
But the in previous thread, the difference was more noticeable; extra "e" and capital "I" instead of small one.
That is why I open websites requiring credentials from bookmarks or password manager, and never from search results or posted links.Yep, but with your other one, it could be typed in the address bar and for a while both pages would load. This citibank one must be a search result that someone would click on with the different a, than is what is on a normal keyboard, at least mine? Or if it was in a email link, or a text etc., could be a hard one to spot
This kind of tactics has been around for ages; just like the ping-pong in the other "Thread".
Jokes aside, if the AV suite can't block the URL on time, it's up for us to be cautious,spot the obvious using our naked eyes.
"If something does not look and feel right, Don't click it"
Jokes aside, if the AV suite can't block the URL on time, it's up for us to be cautious,spot the obvious using our naked eyes.
"If something does not look and feel right, Don't click it"
We have to be; I tried several security extensions (Symantec, McAfee, B); all could not detect.
Redirect is a potential bypass, that is why I have a look on address field before entering credentials.
They did not work for me, one extension installed each time.
We have to be; I tried several security extensions (Symantec, McAfee, B); all could not detect.
Recently browsing
Members who viewed this thread in the last 5 minutes
You may also like...
-
-
-
-
Scams & Phishing New Ghost Phishing Wave Is Breaking Traditional Email Security
-
