Sep 17 2020
11:10 AM
- last edited on
May 24 2021
02:11 PM
by
TechCommunityAP
Sep 17 2020
11:10 AM
- last edited on
May 24 2021
02:11 PM
by
TechCommunityAP
Hi we recently ran a phishing simulation and two results came back as:
162.125.34.244 | DropboxPreviewBot/1.0 |
52.114.75.71 | Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5 |
Both of these are non UK (we are based in UK)
So it looks like they are bots/crawlers, but how are they associated with the email of two of our users, which say they clicked the link... I am no bot expert either but what is actually happening here?
Thanks
Neil
Feb 11 2021 09:18 AM
Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5
Hi Neil,
I also encountered this useragent today and after testing found out that these are not due to the user click however because of automatic preview of url by application like skype/teams.
Its evident that dropbox one is also related to preview by said app.
Thanks
Nitin