Kobold letters: Why HTML emails are a risk to your organization

Re:Kobold letters: Why HTML emails are a risk to your organi... by autoexec on Thursday April 04, 2024 @12:26PM (#39932544)

You aren't wrong. I've got a heavily locked down browser on an off-network device for working with questionable websites. While the vast majority of phishing sites aren't pushing malware spearphishing is another story.

[ Parent | on HN ]

Re:Kobold letters: Why HTML emails are a risk to your organi... by bee_rider on Thursday April 04, 2024 @01:07PM (#39933127)

IT still might not want you to follow the link.

* Other users might have, instead, an incompetently secured browser that they think is locked down on their work devices. It is hard for IT to distinguish between you and them.

* If the URL is personalized, it tells the attacker that the address is active. This is probably pretty limited help to the attacker. But it might tell them if your company emails follow a particular format, right?

[ Parent | on HN ]

Re:Kobold letters: Why HTML emails are a risk to your organi... by fkyoureadthedoc on Thursday April 04, 2024 @02:14PM (#39933999)

> * If the URL is personalized, it tells the attacker that the address is active. This is probably pretty limited help to the attacker. But it might tell them if your company emails follow a particular format, right?

I just asked chatgpt and it knows what email format the company I work for follows, so I'm not sure this is of particular value.

[ Parent | on HN ]

Re:Kobold letters: Why HTML emails are a risk to your organi... by autoexec on Thursday April 04, 2024 @02:26PM (#39934116)

It's useful, even if you aren't a scammer, but it's generally not hard info to get elsewhere.

[ Parent | on HN ]