However, the hacker behind the phishing attack appears to have only stolen the email addresses of those who subscribed to Troy Hunt's blog, rather than Haveibeenpwned.com.
One day working in I.T. at a bank, I received an email that was formatted and written really convincingly that someone has referred me for a bigger role with a salary bump, with light/abstract details that could ‘be inferred as’ relevant to my country, sector & role. It just asked to click-through to see the opportunity-
-which popped-up a warning from the company’s I.T. security that this was a phishing testing/training email, and I’d failed.
I usually evade a phish, but this slightly-targeted one got me good.
After that I had to ritualistically double-check potentially legitimate emails from external domains, for sketchy domains/short URLs/links/tracking cookies etc, because they included vendors & 3rd party consultants or contractors we were working with.
At least (the) God(s) know scammers are bad people.
Heh yeah they’re getting better.
One day working in I.T. at a bank, I received an email that was formatted and written really convincingly that someone has referred me for a bigger role with a salary bump, with light/abstract details that could ‘be inferred as’ relevant to my country, sector & role. It just asked to click-through to see the opportunity-
-which popped-up a warning from the company’s I.T. security that this was a phishing testing/training email, and I’d failed.
I usually evade a phish, but this slightly-targeted one got me good.
After that I had to ritualistically double-check potentially legitimate emails from external domains, for sketchy domains/short URLs/links/tracking cookies etc, because they included vendors & 3rd party consultants or contractors we were working with.
At least (the) God(s) know scammers are bad people.
Heh.