• A jetlagged Troy Hunt accidentally clicked a link and logged into an account only to realise he had been phished.
  • Despite reacting quickly, attackers were able to export a mailing list for Hunt’s personal blog.
  • Hunt has detailed the attack and warned his subscribers in a timely fashion.
  • Jolteon@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 days ago

    If you look at the headers, you can tell which ones are fake phishing and real phishing.

      • Jolteon@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        7 days ago

        Most companies add an email header like “X-PHISHTEST” to the phishing tests (and a corresponding spam filter rule) to ensure they don’t get caught by spam filters. If you look at the headers of a spam email, the company test emails will have that header.