Continue reading...
В Иране заявили о поражении американского эсминца02:21
，这一点在体育直播中也有详细论述
When we investigated these pages, there were some clear indicators that something was wrong. The biggest one is that the Microsoft login flow isn't hosted on a Microsoft domain. While websites can use Microsoft as an authorization source, this normally involves redirecting to a Microsoft-controlled page and then back to the original site once authorization is complete. That's not what's happening here. Beyond that, none of the secondary interface elements work. "Create a new account," "Sign in options," "Can't access your account?" all either do nothing when clicked or redirect back to the current page. This is something we see over and over: phishing kits only implement the happy path where the victim enters their credentials without clicking anything else. Finally, the error messages are wrong. We went through a legitimate Microsoft auth flow and recorded the error states (for example, entering a non-existent email) and compared them to what the phishing page displayed. The language didn't match.
Трамп высказался о непростом решении по Ирану09:14
- Bury real risks in noise. Short list of real findings long list of performed ones.