News for hackers. Stuff that matters.

A comment on I was just subjected to the most credible phishing attempt I’ve experienced.

Re:I was just subjected to the most credible phishing attemp... by jonnycomputer on Wednesday October 09, 2019 @11:02AM (#21203873)
I don't understand how step 4 was achieved. How did they get a list of recent transactions? Or does the password reset functionality ask you to verify certain transactions?
[ Parent | on HN ]
Re:I was just subjected to the most credible phishing attemp... by adambowles on Wednesday October 09, 2019 @11:52AM (#21204348)
They logged in with the newly reset password.
[ Parent | on HN ]
Re:I was just subjected to the most credible phishing attemp... by jonnycomputer on Wednesday October 09, 2019 @01:15PM (#21205340)
Sorry, I still don't see how the attacker would have seen the information necessary to do that, unless the victim's answer's to questions over the phone enabled that.
[ Parent | on HN ]