Author Topic: Fishy  (Read 3131 times)

0 Members and 1 Guest are viewing this topic.

Offline PerranOakTopic starter

  • Frequent Contributor
  • **
  • Posts: 548
  • Country: gb
Fishy
« on: October 06, 2023, 04:34:32 pm »
I’ve received email notifications for updates to posts I’m, apparently, following on this site.
The thing is, these do not show up on the update page on this site.
They are, supposedly, posts by: daviddave2002.
I can’t find this member in the list.
Fishy.
You can release yourself but the only way to go is down!
RJD
 

Offline ataradov

  • Super Contributor
  • ***
  • Posts: 11269
  • Country: us
    • Personal site
Re: Fishy
« Reply #1 on: October 06, 2023, 05:04:33 pm »
Check the links in the email, do they actually lead to EEVBlog or this is a real phishing?

It is a rather interesting phishing idea. Email format from the forum is standard, so it would be very easy to craft a believable phishing email.
Alex
 

Offline golden_labels

  • Super Contributor
  • ***
  • Posts: 1211
  • Country: pl
Re: Fishy
« Reply #2 on: October 06, 2023, 08:34:26 pm »
You can go to Profile → Modify Profile → Notifications to verify, if you are not actually subscribed to some threads. It’s possible the reply has been removed before you came to check for new posts. I’d say this is the most likely scenario.(1)

If it’s not that, verify the link address. If you are reading in plain text, copy the domain name. If you permit HTML, copy the target address (not the one displayed), paste to a plain text editor, copy the domain name. Having that domain name in plain text, compare it with “eevblog.com”. If some letters do not agree (e.g. ‘e’ or ‘o’ have some 1-pixel dot added somewhere, or ‘l’ is actually ‘1’ or some letters are suspiciously uppercase), consider it a phishing attack. If not, the test is inconclusive: you can’t rely on your eyes. Preferably use a computer for comparison: a programming language, Unicode-capable spreadsheet, a diff tool, even calculating hashes.

If it’s the same, likelywe have some mystery. Check if the thread with ID/name used actually exists. It’s possible somebody is spamming users to get answer faster.


(1) I am not dismissive and it’s very good choice, that you reported the situation. But in practice PEBCAK is more common than attacks. And nobody is immune. We are just humans.
People imagine AI as T1000. What we got so far is glorified T9.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf