{"id":439,"date":"2025-11-20T20:37:00","date_gmt":"2025-11-20T20:37:00","guid":{"rendered":"https:\/\/zombierollz.blog\/?p=439"},"modified":"2025-11-20T17:37:46","modified_gmt":"2025-11-20T17:37:46","slug":"phishing-emails-in-action","status":"publish","type":"post","link":"https:\/\/zombierollz.blog\/?p=439","title":{"rendered":"Phishing Emails in Action"},"content":{"rendered":"\n

https:\/\/tryhackme.com\/room\/phishingemails2rytmuv
Created by: tryhackme, TactfulTurtle<\/p>\n\n\n\n

“Each email sample showcased in this room will demonstrate different tactics used to make the\u00a0phishing\u00a0emails look legitimate. The more convincing the\u00a0phishing\u00a0email appears, the higher the chances the recipient will click on a malicious link, download and execute the malicious file, or even send the prince of some country a wire transfer.”<\/p>\n\n\n\n

In Task 2, THM breaks down a spam email regarding a PayPal order.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

It also shows a very convincing email, but upon looking at the HTML source, it shows that the clickable link in the email is using a URL shortening service.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

In Task 3, we are reviewing an email regarding package tracking. It goes into “tracking pixels(tiny images) that can be put into spam emails.” Again, we are instructed to use CyberChef to defang the URL.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

In task 4, an urgent-type email is shown. It breaks it down by showing what eventually happens(credential harvesting) as the user inputs their username and password. To see the full analysis of the email, head over to: https:\/\/app.any.run\/tasks\/12dcbc54-be0f-4250-b6c1-94d548816e5c\/#.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

The next task covers a Netflix spoofed email.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

You will need to do some googling for the next answer. Look at the official site of help.netflix.com.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

The next task covers an Apple related spam email.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

The next task covers a DHL email. Eventually, the .exe file runs Excel and throws an error message.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

https:\/\/tryhackme.com\/room\/phishingemails2rytmuvCreated by: tryhackme, TactfulTurtle “Each email sample showcased in this room will demonstrate different tactics used to make the\u00a0phishing\u00a0emails look legitimate. The more convincing the\u00a0phishing\u00a0email appears, the higher the chances the recipient will click on a malicious link, download and execute the malicious file, or even send the prince of some country a wire transfer.” […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-439","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/posts\/439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=439"}],"version-history":[{"count":2,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/posts\/439\/revisions"}],"predecessor-version":[{"id":456,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=\/wp\/v2\/posts\/439\/revisions\/456"}],"wp:attachment":[{"href":"https:\/\/zombierollz.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zombierollz.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}