Post #2096819

2026-04-26 19:41 UTC

Scam attempt just now. Supposedly somebody from google checking in about a change to my account recovery details. Contact via both phone and email, with both a robot and a brit sounding guy. Knew a bunch of personal details (just stuff one could easily get via leaks etc). Interesting bit is that it&#39;s not clear what they were after. Not a straight attempt at relaying SMS &quot;2FA&quot; or such. Played along until they wanted me to repeat a case number back to them, which seemed too risky.

Replies (4)

@bert_hubert@eupolicy.social 2026-04-26 19:44

@AndresFreundTec@mastodon.social Jia Tan got bored perhaps? :-)

Open ##2194726
@alien@mastodon.green 2026-04-26 19:47

@AndresFreundTec@mastodon.social as a person working day to day in cybersec incidents for a few years now, I cannot stress enough how important it is not to engage into these as soon as fraud is detected. I've come to realize it is tempting to a lot of people. Sometimes they are just looking for a confirmation of gathered data (is this name connected to these X and Z elements?) or to confirm working hours, phone availability, etc. It's better just to stop interaction and proceed to either block or get help.

Open ##2194729
@axboe@fosstodon.org 2026-04-26 20:19

@AndresFreundTec@mastodon.social got the same one here…

Open ##2194732
@briankrebs@infosec.exchange 2026-04-26 22:22

@AndresFreundTec@mastodon.social Was the call preceded by an automated voice asking you to press 1 to speak to someone? A lot of times, these calls are automated at first by a "press 1 bot" which helps find only "live" ones.

Open ##2194738