97 points

Attacks begin when users are lured into “visiting suspicious websites or click on phishing links that download malicious software onto their computer.”

🤦

permalink
report
reply
84 points

I was lured into reading a suspicious Forbes article.

permalink
report
parent
reply
1 point
*

The domain is leased to SEO lizards https://larslofgren.com/forbes-marketplace/

permalink
report
parent
reply
20 points
*

Incidentally, we try not to use these sorts of “Forbes contributor” articles on Wikipedia when possible. They’re effectively just blogs masquerading under the credibility of Forbes staff’s actual journalism.

That said, I don’t see anything wrong with this excerpt. This is legitimate attack vector.

permalink
report
parent
reply
8 points
*

It’s always being an attack vector. Phishing scams have been the oldest form of fraud from the beginning.

It’s basically the same principle that con artists have been using for decades long before the invention of the internet

permalink
report
parent
reply
5 points

Tying it to big name providers like they have a security hole in the title is clickbait at absolute best.

permalink
report
parent
reply
15 points

As someone who actively defends and trains against these attacks, I still see people downloading and executing suspicious files regularly.

permalink
report
parent
reply
6 points

It’s always the same people in my experience. No matter how many times they go through the training it never seems to stick.

permalink
report
parent
reply
0 points

Yeah, I dunno what the facepalm is supposed to be about. 99% of the rest of the world has about 1% of the tech knowledge that the average Lemmy user is going to have. These scams are wildly effective, and it’s not really a matter of general intelligence as far as who falls victim to them.

permalink
report
parent
reply
11 points

For me, the article makes it seem like there’s some new announcement that the FBI has put out about a newly discovered vulnerability. Turns out, the announcement is about vulnerabilities we’ve known about for a long time.

permalink
report
parent
reply
7 points

Hell I almost got snagged by one recently, and a goodly portion of my last job was dealing with phishing sites all day.

They’ve gotten good with making things look like a proper email from a business that would be sending that kind of email, and if you’re distracted and expecting something you can have at least a moment of ‘oh this is probably legitimate’.

The giveaway was, hilariously, a case of using ‘please kindly’ and ‘needful’ which uh, aren’t something this particular company would have actually used as phraseology in an email, so saved by scammers not realizing that americans at least don’t actually use those two phrases in conversation.

permalink
report
parent
reply
5 points
*

You don’t need to have advanced technological know-how to know about phishing scams. Practically every company has a boring training course you have to go through at least once a year.

I work in cyber security and they still feel the need to tell us about phishing scams, like we don’t know about 100 other scarier things.

permalink
report
parent
reply

Years ago I might have agreed, but with digital technology having become so central to one’s daily life I find it hard to excuse those who fail to educate themselves about the very basics.

permalink
report
parent
reply
8 points

After reading various news amd stories about phishing, I no longer think anyone is really “too smart to be phished”. Not the matter of “If”, but “Under what circumstances”.

permalink
report
parent
reply
5 points

congrats! you’re the first person I’ve seen actually get what “phishing” means.

every fish can be caught, they react on instinct. same for people and links. they were made to be clicked so we instinctually click them.

permalink
report
parent
reply
4 points

Also:

The threat affects all email platforms providing web logins, albeit Gmail, Outlook, Yahoo and AOL are by far the largest

This is really just a generic article saying “be careful what you click on”

permalink
report
parent
reply
3 points

Thank you, I saw Forbes and was immediately suspicious of click bait.

permalink
report
parent
reply
3 points

An old time classic.

permalink
report
parent
reply
9 points

Sometimes I get phishing sent to protonmail. These guys think that protonmail users will be a good target for their scams? Lmao

permalink
report
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 17K

    Monthly active users

  • 12K

    Posts

  • 542K

    Comments