Remember to delete (or eat) cookies regularly !!!
- Thread starter xReminisce
- Start date
- Feb 24, 2019
- 5,247
- 1,535
Microsoft365/outlook is generally primary targets. These are easier with phishing links.
MKSKS
Banned for failing to resolve dispute.
- Jul 11, 2013
- 6,098
- 4,464
Like a client of mine downloaded some game for free from some random website.
The next day his ecom store was hacked, all his emails reported suspicious login, his facebook account was suspended, his vps hosting account and server both were compromised, cloudflare account was compromised, bank accounts were safe due to their security algorithm that prevented suspicious login from a foreign country etc...
Turns out he stores all his login and passwords in chrome and the game he downloaded was compromised that gave the hacker access to his pc.
xReminisce
Elite Member
- Dec 29, 2012
- 7,329
- 36,654
imagine that
tell him to get bitwarden or something
UnusualSubstance
Elite Member
- Feb 22, 2019
- 2,045
- 22,835
The memories of the sheer amount of free-robux-generators.exe I downloaded as a teen are resurfacing.
Cheers Remi.
Cheers Remi.
- May 6, 2020
- 1,091
- 6,408
I read the article... Ahhh, I get it. It's like this built-in feature in RATs, right? You can steal the cookies, not only passwords, cc numbers, etc. The article doesn't say if the victims downloaded a file and got infected with a RAT or it's just from clicking - exploits like these exist too but these are paid (I mean full featured RATs too, more often than not, it's a whole economy). Nothing new in this article, idk.
natsuko
Banned - Multiple Rules Violations
- Aug 21, 2023
- 2,377
- 1,164
It’s easy to overlook, but regularly clearing cookies is crucial for staying secure, especially with cybercriminals finding new ways to bypass MFA. I try to make it a habit to clear them every couple of weeks and always avoid using “Remember Me” on sensitive accounts. Better safe than sorry.
xReminisce
Elite Member
- Dec 29, 2012
- 7,329
- 36,654
Yup, nothing new but it's a nice reminder for peeps
- Mar 15, 2023
- 699
- 327
There's all sorts of creepy shit a site can do when it's infected. Lookup BEEF.
Edit: https://www.techtarget.com/searchse...o-use-BeEF-the-Browser-Exploitation-Framework
Edit: https://www.techtarget.com/searchse...o-use-BeEF-the-Browser-Exploitation-Framework
Last edited:
zotix
BANNED
- Oct 21, 2023
- 1,147
- 696
Cookies are by far not the things to consider. I had to look 3x if the Date of this Article is 10 years old or not.
Cookies / Session Stealing / Downloading Stuff: If you are unaware of the Source, running it on a Local Machine is far worse.
An example that I reported today is SSL Pinning.
There are many ways to capture the 2FA - but at the end of the Day, it depends on the user most likely to get phished (in many cases): Download a good Browser, hide trackers, use a Local Machine not to run any weird Scripts, either in Virtual Box, Strong passwords (different) on different pages, use a password manager & don't safe them in your Browser, turn off auto download in your messengers, don't permit everything - even if it looks legit - give it when you are forced to & it makes sense, turn on Firewall & Malwarebytes (Premium), run files or links through virus total if they seem suspicious. Use 2FA wherever you can; E-Mail is better than nothing, Mobile is better, and Hardware Token is even better.
Use your Brain while being online - that's what I tell my mother sometimes, in case she clicks around again.
With this approach, you avoid at least half of the obvious. Scams.
If someone wants to hack you or get traffic, they can do so through Discord, Telegram, or whatever.
This post is not addressed to @lucky.sparks , or OP.
Just casual "How to prevent Script Kiddies 101"
Still; lucky.sparks comment was funny.
Best,
zotix
UnusualSubstance
Elite Member
- Feb 22, 2019
- 2,045
- 22,835
Wait you aren't supposed to "click here, you've won iPhone 16" ads?
Ah.
Ah.
zotix
BANNED
- Oct 21, 2023
- 1,147
- 696
Unfortunately, I did not receive those kinds of ads. But once, a single hot mom in my area wanted to date me.
After starting to chat with her, she asked me for a phone call.
Since then, we get weird phone bills and a lot of physical newsletters (adult), which is a bit odd.
Maybe I will call her with another number again and ask her for a date because she was so busy and somehow her profile picture disappeared.
- Oct 29, 2021
- 8,418
- 3,570
I unnecessary plugin, or chrome adons are dangerous here.
Thanks a lot letting us know @xReminisce also let us know how to keep fbi and hackers away from my home.
Thanks a lot letting us know @xReminisce also let us know how to keep fbi and hackers away from my home.
- Dec 21, 2023
- 1,627
- 816
I see what you mean, most of the time people just let the website remember the account and password to save time, and hackers use this cookie to steal information
- Oct 6, 2020
- 2,626
- 9,931
why tho? Can you explain how by simply visiting a malicious site you could get your Paypal cookies stolen?
zotix
BANNED
- Oct 21, 2023
- 1,147
- 696
Good morning. Do you take this question seriously? I mean you are a smart person - I think you understood the reaction to the emoji wrong.
If this is a serious question, there is one example in my post and I can give you 10 more - without any chatgpt chitchat,.
Best regards,
zotix
- Oct 6, 2020
- 2,626
- 9,931
My question? Yes, I mean it seriously. Yes, perhaps I misunderstood something here. Can you give only 1 example?
Correcaminos
Newbie
- Sep 25, 2024
- 30
- 237
Not possible without downloading anything. Despite OP's good intention in sharing this advice, FBI is a poorly reliable agency, based on its history it's hard to believe in anything they say. It seems they are trying to spread lies with this idea of visiting a website and get instantly infected without downloading anything, imagine if it was real, just use ads and infect thousands of people per day just by getting traffic. Woudln't it be quite profitable for them? Just run some pop ads and boom, millions of cookies stolen by visiting a website without any interaction from the user.
But yes, be careful about what you download