Google safe browsing bypass?
https://www.reddit.com/r/redteamsec/comments/13keooi/google_safe_browsing_bypass/

<!-- SC_OFF -->Hi, Setting up a basic phishing campaign, I noticed that Google safe browsing is blocking me by accessing my phishing page. Let me explain. I've setup a custom domain with a fake Microsoft login page for a phishing campaign against a customer, everything ok, I've also placed in front of the host an anti-bot system to prevent to be spotted by crawlers/bots from Palo Alto, Fortinet and all the threat hunting services. Domain up for more than 15 days, 0 "red flags" except one. Google safe browsing. I guess the problem is that when a user visits my website, Google Chrome analyzes the phishing page with the user's browser. This behaviour is default and maybe the phishing webpage could be ok of the first 2/3 victims, but after the 4th one who opens the page (assuming always Google Chrome browser) they will see a red flag saying to stay back fron that domain. Any idea to prevent this? I mean...I cannot skip the problem saying "let's hope they do not use chrome". Thanks. <!-- SC_ON --> submitted by /u/Express_Key3378 (https://www.reddit.com/user/Express_Key3378)
[link] (https://www.reddit.com/r/redteamsec/comments/13keooi/google_safe_browsing_bypass/) [comments] (https://www.reddit.com/r/redteamsec/comments/13keooi/google_safe_browsing_bypass/)

hacking: security in practice
Wardriving for smart phones - wifi or bluetooth?

I'm curious if practitioners of wardriving use wifi or bluetooth signals or both to determine the location of a smart phone? Would an ESP32 be the ideal microcontroller for such a project given it's wifi and BLE components?

Thanks.

submitted by /u/upekkha__
[link] [comments]

hacking: security in practice
Cyberpunk Radio - Free 24/7 Live Streaming

https://external-preview.redd.it/nh2C7AZDKvr_f2UyTBedzv_UeD0czcoDp_tD45Oo6gI.jpg?width=320&crop=smart&auto=webp&s=3da1308c0d376cfe551d445f97d3f18c6557b49b submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
Windows CVE-2023-24932 Patch

submitted by /u/DRVX92
[link] [comments]

hacking: security in practice
DeleteMe Alternative

While listening to Darknet Diaries he was promoting DeleteMe. Is there any good PII services out there other than DeleteMe?

submitted by /u/BothBug5470
[link] [comments]

hacking: security in practice
How to view employees' computers

Hello,

I run a small business with a few employees and was looking for an easy way to install software to monitor and remotely control the computers. They have Macbooks that are supplied by the company and we are expected to have many new hires so I was wondering if there was an easy way to install software to do such tasks. I am looking for a quick and easy solution, such as plugging in a USB or anything that you suggest. Thank you for your help!

submitted by /u/Zakattak756
[link] [comments]

Dark Reading: Attacks/Breaches
Lemon Group Uses Millions of Pre-Infected Android Phones to Enable Cybercrime Enterprise

Lemon Group's Guerrilla malware model an example of how threat actors are monetizing compromised Android devices, researchers say.

Dark Reading: Attacks/Breaches
5 Ways Security Testing Can Aid Incident Response

Organizations can focus on these key considerations to develop their cybersecurity testing program sustainably.

Dark Reading: Attacks/Breaches
BianLian Cybercrime Group Changes Up Extortion Methods, Warns CISA

CISA urges small and midsized organizations as well as critical infrastructure to implement mitigations immediately to shield themselves from further data exfiltration attacks.

Dark Reading: Attacks/Breaches
Houthi-Backed Spyware Effort Targets Yemen Aid Workers

Pro-Houthi OilAlpha uses spoofed Android apps to monitor victims across the Arab peninsula working to bring stability to Yemen.

The Perils and Protections: Navigating WordPress Vulnerabilities
https://medium.com/@CyberVerseOfficial/the-perils-and-protections-navigating-wordpress-vulnerabilities-6e03d1163c36?source=rss------bug_bounty-5

Protect Your WordPress Site: Discover real-world threats, learn from recent incidents, and secure your website with effective defenses…Continue reading on Medium » (https://medium.com/@CyberVerseOfficial/the-perils-and-protections-navigating-wordpress-vulnerabilities-6e03d1163c36?source=rss------bug_bounty-5)

Hacking on Medium
How To Confront a Phishing Scammer Using His Own Telegram Tools

https://cdn-images-1.medium.com/max/1197/0*3xRu4gHDBJqKX4GD.png
Telegram has become popular among cyber attackers who use this instant messaging App as part of phishing kits. Learn how this tool will…

Continue reading on Medium »

Hacking on Medium
The Perils and Protections: Navigating WordPress Vulnerabilities

Protect Your WordPress Site: Discover real-world threats, learn from recent incidents, and secure your website with effective defenses…

Continue reading on Medium »