phishing

Pas op mensen, #DigiD #oplichting per brief. #phishing

Via deorkaan.nl

https://www.deorkaan.nl/opgepast-digid-oplichting-per-brief/

Comecei escrevendo aqui, mas, como acabou ficando extenso demais, achei melhor tornar mais perene e publicar no blogue:

A dificuldade de educar usuários contra "phishing" causada pelas instituições

https://blog.ayom.media/daltux/a-dificuldade-de-educar-usuarios-contra-phishing-causada-pelas-instituicoes

🤷 Quem envia mensagens mal intencionadas deita e rola mesmo! :ciladaBino:

Sinceramente, três palavas me vêm à mente quando vejo essa situação, e não são publicáveis! 🗯️

#phishing #infoSec #segurança #privacidade #email #golpes

🚨 Scam Alert: "Verify your Fedi account" Phishing Attempt 🚧

Attention everyone on Mastodon! There's a scam making the rounds where malicious actors impersonate moderators or admins. They send private messages or make posts that mimic notifications, claiming that your account needs verification. These messages often include a link for you to "complete the verification process."

⚠️ This is a Scam!

Your server admin will never ask you to click a link to verify your account.
No other admin from any other server will either, even if they appear to be part of the main Mastodon team.
If your account is suspended, you won't receive a message about it. Instead, you'll see a notification upon logging in that your account is temporarily suspended.

How to Identify the Scam:

Fake admin accounts often use names containing "moderator" or "admin," but this doesn't mean they are legitimate.
Legitimate admins or instance owners usually have a badge or marking on their profile indicating their role.

What to Do:

If you receive a message or post urging you to click a link to verify your account, report it immediately.
If you have any doubts about your account status, contact your server admin or moderation team directly.
To verify the authenticity of an admin or instance owner, visit the "About" page of your instance. This page typically lists contact information for the real team administering your instance.
Always be cautious when interacting with accounts claiming to be from Mastodon or your instance's admin team.

Important Reminder:

Mastodon does not perform age verification. If you receive a message or post claiming to be from Mastodon or your instance's admin team, always verify its authenticity before taking any action.

Reporting the Scam:

If you encounter this scam, report it to your instance's admin team and use relevant tags, such as #FediBlock, to help raise awareness.

Personal Note:

I'm not a cybersecurity expert, but I find this new scam in the Fediverse quite interesting. If you feel like sharing your experiences with me, I would appreciate it! I'm looking to collect cases and get a broader view of this phishing attack. Maybe I'll even try to write a report about it. Feel free to tag me in any relevant posts.

Let's stay vigilant and help each other stay safe online!

#Mastodon #Fediverse #ScamAlert #Phishing #CyberSecurity #OnlineSafety #FediBlock #StaySafe #TechCommunity #SocialMedia #ScamAwareness #SecurityTips #ReportScams #VerifyBeforeYouTrust

I received another phishing email along the lines of "such and such service needs to be reset; contact your administrator by clicking the following link".

I opted not to click the link and instead contacted the administrator directly. The administrator, who is me, confirmed there was nothing amiss and that I should consider the email spam.

#tech #SelfHosting #phishing #scams

Just received an email from my mail server administrator. They sent me a link to change my password because it's 'insecure'.

My mail admin is so efficient...

...hey, wait a minute... I AM my mail administrator! 🤦‍♂️

#Phishing #SelfHosting #SysAdminLife #SecurityFail #InfoSec

PSA: The "verification" scammers / phishers arrived in the ATmosphere [social] network. 😅

NEVER CLICK THE LINK!

#ATmosphere #Bluesky #scam #phishing #SocialWeb

So I’m being AGGRESSIVELY attacked by a #phishing group that thinks I have #Bitcoin to steal. I thought I might document what I’m getting to help others protect themselves. I’ll continue this thread over time to reflect the new scams…

A slick new phishing-as-a-service offering demonstrates just how easily a username+password and a one-time token can be phished. Dubbed "Starkiller," the service uses cleverly disguised links to load the target brand's real website, and then acts as a relay between the victim and the legitimate site -- forwarding the victim's username, password and multi-factor authentication code to the legitimate site and returning its responses.

https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#phishing #MFA #starkiller

🚨 Phishing alert 🚨

She's back! Beware of any iteration of Mavis Wanczyk, also sometimes written "Mavis wanczyk" or "MAVIS L. WANCZYK". This is a known lottery scam.

https://www.aarp.org/money/scams-fraud/powerball-lottery-winner-scam/
https://scamicide.com/2025/01/29/scam-of-the-day-january-30-2025-mavis-wanczyk-scams-continue-to-claim-victims/

Do not: interact or click any links in the bio!
Do: block and report!

#MavisWanczyk #phishing #scam

🚨 Beware of fake "verification" post I just received here. Reported and blocked. 🚨

Update: it gets worse...

#Phishing #Scam #Spam

⚠️ Achtung: Phishing-Versuch im Fediverse

Gerade erreichte uns unter einem Beitrag ein Kommentar eines angeblichen „pixelfed bot“.

Darin wird behauptet, der Pixelfed-Account sei wegen „ungewöhnlicher Aktivitäten“ eingeschränkt worden und müsse innerhalb von 24 Stunden über einen angegebenen Link verifiziert werden.

Bitte diesen Link NICHT anklicken und keine Zugangsdaten eingeben! ⚠️

Der Kommentar ist sehr offensichtlich ein Phishing-/Spam-Versuch. Auffällig sind unter anderem der künstlich erzeugte Zeitdruck, die angeblich drohende Accountsperre und vor allem der externe Kurzlink zur „Verifizierung“.

Wir haben den betreffenden Kommentar auf unserer Friendica-Instanz bereits über die Administration gelöscht.

Falls euch ähnliche Kommentare begegnen: nicht reagieren, keinen Link öffnen, melden und – sofern ihr die Möglichkeit dazu habt – entfernen.

Passt gut auf eure Accounts auf. Das Fediverse ist dezentral – leider macht auch Spam und Phishing davor nicht halt.

#Fediverse #Friendica #Pixelfed #Phishing #Spam