#KoboldLetters
LightNews LightNews
weddige.eu
Awareness may be enough when you're up against a Nigerian prince, but it won't help you against #KoboldLetters.

I've looked at an attack strategy that (mis)uses HTML and CSS to create sophisticated #phishing attacks that will fool even the most attentive reader.

lutrasecurity.com/en/articles/...
Kobold letters – Lutra Security
Anyone who has had to deal with HTML emails on a technical level has probably reached the point where they wanted to quit their job or just set fire to all the mail clients due to their inconsistent i...
lutrasecurity.com
April 2, 2024 at 12:43 PM
lutrasecurity.infosec.exchange.ap.brid.gy
One week ago we were at #bsidesmunich2024 and if you didn't get a chance to attend, you can now catch up by watching the recordings.

For example, @weddige's talk about Kobold Letters And Other Mischief: https://www.youtube.com/watch?v=ko9cwRM3BZU

#koboldletters #salamandermime
November 19, 2024 at 8:56 PM
weddige.gruene.social.ap.brid.gy
Today I found out that my article on #koboldletters inspired this work on #ficklepdfs: https://portswigger.net/research/fickle-pdfs-exploiting-browser-rendering-discrepancies
Fickle PDFs: exploiting browser rendering discrepancies
Imagine the CEO of a random company receives an email containing a PDF invoice file. In Safari and MacOS Preview, the total price displayed is £399. After approval, the invoice is sent to the accounti
portswigger.net
January 7, 2025 at 1:46 PM
weddige.gruene.social.ap.brid.gy
the recording of my talk on #koboldletters and #salamandermime is now on YouTube: https://www.youtube.com/watch?v=ko9cwRM3BZU
November 18, 2024 at 12:42 PM
weddige.gruene.social.ap.brid.gy
@lutrasecurity I'll be talking about #salamandermime and #koboldletters at @BSidesMunich tomorrow:

https://2024.bsidesmunich.org/talks/002-06_JUXQQB_kobold-letters-and-other-mischief-how-emails-can-deceive-you/
November 10, 2024 at 12:40 PM