Conversation

Notices

1. Embed this notice
   Matt Gray (mattgrayyes@chaos.social)'s status on Thursday, 20-Feb-2025 00:45:32 JST Matt Gray

   I just got Phished 🤬
   I’m sharing to reduce your chance of getting phished too.

   Waiting for an Evri delivery, I saw the notification for this email, & the link took me to a page saying they’d failed to deliver.

   These work by social engineering: I was too frustrated to notice it was sent to the “wrong” email address, or the dodgy URL of the page.
   It asked for my details. It had no plausible reason to need my DOB so I didn’t give it one, but I still gave it everything else because I was rushing.

   • nyanide :nyancat_rainbow::nyancat_body::nyancat_face: repeated this.
   • Embed this notice
     Matt Gray (mattgrayyes@chaos.social)'s status on Thursday, 20-Feb-2025 00:46:15 JST Matt Gray

     in reply to

     I then realised on the next screen when it asked for money.
     I know redeliveries are free. At that point I looked at the URL and realised my mistake.

     So here’s some proof that it can happen to anyone. I’ve delivered cybersecurity training in the past.
     But they got me at a moment where I was slightly emotionally vulnerable.

     It also had three .mobileconfig files as attachments too, which I didn’t spot at first, but these can reconfigure your phone/computer if you open them!