跳转到内容
View in the app

A better way to browse. Learn more.
彼岸论坛

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
欢迎抵达彼岸 彼岸花开 此处谁在 -彼岸论坛

[信息安全] 今日遇到的 OpenVPN 钓鱼

发表于

网络环境：东京都 NTT OCN 家庭宽带

复现流程：

Google 日本搜索 openvpn macos download

第一项 スポンサー 则为钓鱼结果

Untitled

最终钓鱼页面

https://cdn.sa.net/2024/07/04/c2mCL3YqeftnNlG.png

具体钓鱼细节有可能出现两种情况：

第一种是 href 为 正确的域名，但是有 data-rw 字段，点击后实际跳转到钓鱼的链接上

Untitled

第二种则是直接跳转到钓鱼链接

https://cdn.sa.net/2024/07/04/YUu3cxlVBDhIJpv.png

跟踪这个跳转地址

https://cdn.sa.net/2024/07/04/hIQGq5AdTLZz3eK.png

第二跳来到了 openvpn.app.link

Untitled 继续跳转到了 https://nmydf.org/

Untitled

随后跳转到实际展示的钓鱼地址 openvpm.com

附钓鱼测试效果视频

https://www.youtube.com/watch?v=hg1us_e0xcI

附：在 Chrome 无痕模式也复现成功了

incognito

附：钓鱼 dmg 样本

https://drive.google.com/file/d/1t4kr0nKBensiKjVwqr1LEac7xOBLBz27/view?usp=drive_link

Featured Replies

No posts to show

创建帐户或登录来提出意见
前往主题列表

Account

导航

搜索

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.