Author Topic: Help on suspicious link  (Read 527 times)

0 Members and 1 Guest are viewing this topic.

Offline corxfinance

  • Newbie
  • *
  • Posts: 3
Help on suspicious link
« on: November 13, 2019, 03:57:09 PM »
Hi

My wife today decided to click on a link (invoice) before I had to chance to stop her. This was on her android phone. The link was

//21hospitality.cmail19.com/t/i-l-purittk-ckilduus-r/

I have used some checkers like urlvoid.com etc & they validate the 21hospitality.cmail19.com as OK. However, my concern are the additional switches after the .com. Could these be used for a key logger etc to access the home network & do real damage from there having deployed something on the phone.

I installed after the event Avast as well malwatebytes and Zemana and have scanned with no issues found. I have changed email passwords and some other accounts.

Just me being twitchy - hopefully

Brian
« Last Edit: November 13, 2019, 04:28:33 PM by corxfinance »

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2779
  • Volunteer
Re: Help on suspicious link
« Reply #1 on: November 13, 2019, 04:25:27 PM »
Hi Brian<

I'll get back to you in a moment with scan results - but can you please disable the link (edit your post and change the HTTP to hxxp)
*Volunteer*.
Tier I SOC Analyst; Threat Hunter; Digital Forensics (no cert); HTB Competitor; Pentester (no cert).

4th Year BCS Student.

Offline corxfinance

  • Newbie
  • *
  • Posts: 3
Re: Help on suspicious link
« Reply #2 on: November 13, 2019, 04:31:32 PM »
Hi

I have removed the link.

Please note when I said installed after the event, I mean't the android phone. I have Avast and Malwarebytes deployed on my pc along with all the usual privacy and protection options neabled.

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2779
  • Volunteer
*Volunteer*.
Tier I SOC Analyst; Threat Hunter; Digital Forensics (no cert); HTB Competitor; Pentester (no cert).

4th Year BCS Student.

Offline corxfinance

  • Newbie
  • *
  • Posts: 3
Re: Help on suspicious link
« Reply #4 on: November 13, 2019, 04:39:08 PM »
Much appreciated Michael