<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.sophos.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Device breakdown -  unknown device types</title><link>https://community.sophos.com/phish-threat/f/discussions/121777/device-breakdown---unknown-device-types</link><description>Hi, 
 Does anyone know what are &amp;#39;unknown device types&amp;#39; under the device breakdown? Why are the devices unknown. 
 
 Thanks</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Device breakdown -  unknown device types</title><link>https://community.sophos.com/thread/442798?ContentTypeID=1</link><pubDate>Tue, 14 Jul 2020 11:50:30 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:1f415cd2-93b9-4672-b371-cd22366a4d2c</guid><dc:creator>Rikky Bessell</dc:creator><description>&lt;p&gt;That&amp;#39;s great. Thanks&amp;nbsp;MEric&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Device breakdown -  unknown device types</title><link>https://community.sophos.com/thread/442753?ContentTypeID=1</link><pubDate>Mon, 13 Jul 2020 23:24:39 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:52617cb8-a180-4676-a32d-de4168decf91</guid><dc:creator>MEric</dc:creator><description>&lt;p&gt;Hi Rikky,&lt;/p&gt;
&lt;p&gt;A user agent is software (a software agent) that is acting on behalf of a user, such as a web browser that &amp;quot;retrieves, renders and facilitates end user interaction with Web content&amp;quot;. When a software agent operates in a network protocol, it often identifies itself, its application type, operating system, software vendor, or software revision, by submitting a characteristic identification string to its operating peer. This identification is transmitted in a header field User-Agent.&lt;/p&gt;
&lt;p&gt;Here&amp;#39;s an example of a user agent:&amp;nbsp;&lt;a href="https://developers.whatismybrowser.com/useragents/parse/1302411-chrome-windows-blink"&gt;&lt;em&gt;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36&lt;/em&gt;&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;What is likely happening is that the user is opening the phishing email in a web browser, the browser is either providing a user agent where the hardware type &lt;a href="https://developers.whatismybrowser.com/useragents/parse/89785-netfront-netfront"&gt;isn&amp;#39;t specified or unknown.&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;You can read up more on &lt;a href="https://en.wikipedia.org/wiki/User_agent"&gt;User Agents on the Wiki page&lt;/a&gt;.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>