Printable View
Got an email that looked authentic from my company. I mistakenly clicked it. Took me to a page that looked like a MicroSoft login for shared drive. It prompted me for my MS password. I put that in and it didnt take. I tried another one and that didnt take. Then I realized I just gave this SOB two passwords. I hope that is all that I gave them. Is there a way to tell if I am infected or otherwise compromised? Thank you very much.
You can run scans with your antivirus software and Malwarebytes.
I assume that you have changed your compromised passwords already.
To verify that an email came from the sender it says it came from, you can look at the header information. Check for origins from network centers outside your area (RIPE - Netherlands, or APAC - Asia Pacific region), and check the sending IP address against what it should be for your company or the purported sender to see if they match.
Links:
https://resources.infosecinstitute.c...cious-content/
https://www.pepipost.com/blog/how-to...identify-spam/
https://www.cmu.edu/iso/news/2020/email-spoofing.html
https://www.becybersafe.com/online/e...-advanced.html
Thanks for the reply. The links were interesting, but I am a novice and they were a bit intimidating. Having clicked on something malicious, I'm very anxious opening up an email to reveal the information described in those links.
As jdc2000 has said change your passwords immediately if you haven't already. Also, if you use those same passwords on other sites change them now too asap. And unfortunately now that you fell for one fake email you might be targeted for more. Be very wary of any email that requires you to click a link and even more so to download or open a file.
Also just hovering your mouse over a link in an email (and NOT clicking it) will generate a temp, small popup link usually in the lower edge of your browser or email client. You can look at that too to see where it goes to. If it's spam or from a source other than what it claims to be it will often be obvious... like if the email says it's from Microsoft but that little popup says something else then beware. And look for spelling too.. eg: microsoft might be faked by micorsoft or microsoft.othername in a link address.
Generally just opening an reading an email is safe. It's what you do in there that could be a big problem if it's malicious.
Please complete all steps listed here: http://discussions.virtualdr.com/sho...d-4-28-2013%29
Please, observe following rules:
- Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
- If you're stuck, or you're not sure about certain step, always ask before doing anything else.
- Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
- Never run more than one scan at a time.
- Keep updating me regarding your computer behavior, good, or bad.
- The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
- If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
- I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.