Michał "rysiek" Woźniak · 🇺🇦In $OLDJOB where I was responsible for people at actual risk, a person pinged me with "did you actually send that e-mail?"
It took *me* a couple of minutes to figure out it was a targeted attack. Coming from a very similar e-mail address to mine. Having *my actual e-mail signature*.
The attack got blown. Nobody got phished. Later I figured out the attack took 3 months of prep.
Asked the person how did they know.
"I didn't. It was a hunch. You told us to trust our hunches." 🎉
All GNU social JP content and data are available under the