Post #1735318
2026-04-27 21:46 UTC
Replies (4)
-
@davep@infosec.exchange 2026-04-27 21:47
@ahltorp @jtb @signalapp Indeed
-
@stagerabbit@famichiki.jp 2026-04-28 06:14
@ahltorp @davep @jtb @signalapp People have been trying to scam me since the 90s and I've always seen through it or taken a moment to check. Even so, I got had a couple of months ago by a very obvious piece of social engineering. All it takes is being tired, or stressed, or distracted, or all three, and you just go into automatic when asked to do something. I had to change all my passwords, update all my 2FA, change email addresses used for logins, etc. It can happen to anyone. Edit: typo
-
@nikolaihampton@infosec.exchange 2026-04-29 22:37
@ahltorp @davep @jtb @signalapp as a real world story. I work in cyber security. The team I work with is a very experienced security conscious team of devs (many with 20+ years experience). One got hit with a phish because of a perfectly timed email. The email was obviously a scam IF you weren’t expecting a parcel delivery. Unfortunately, my colleague was expecting a parcel delivery! The phishers managed to hit the right topic and context and a timing window that coincided with a highly anticipated, expected delivery, from that exact carrier at about the right time. Luckily he realised within minutes and was able to move quickly to change passwords and reset credentials. This wasn’t even spear phishing or any sort of targeted, social engineering supported attack. It was just luck and timing.
-
@fruitless_tux@mastodon.social 2026-05-09 09:45
@ahltorp@mastodon.nu @davep@infosec.exchange @jtb@toot.wales @signalapp@mastodon.world The individuals concerned are also not known in Germany for being the brightest minds. Furthermore, they belong to parties that like to point fingers at others when their own actions fail.