We [Reddit] had a security incident. Here’s what we know

Re:We [Reddit] had a security incident. Here’s what we know by chaoz_ on Thursday February 09, 2023 @08:10PM (#34734269)

Yes, it is sophisticated. Phishing emails are opened more often then regular mail (assuming it’s in your inbox) and click-rate is pretty high.

You might be good at cracking phishing simulation at your workplace, but many people won’t know if “amazon.example.com” or “example.amazon.com” is real. This is of course something good filter will pick up, but consider how hard it is to make sure 0 employees fall to the attack.

Also, even 2FA can get compromised with notification spam, that’s how it played out in one of the attacks couple of years ago.

[ Parent | on HN ]

Re:We [Reddit] had a security incident. Here’s what we know by ruskyhacker on Thursday February 09, 2023 @08:22PM (#34734370)

No, it's not sophisticated. They're using "sophisticated" inappropriately here for pure PR.

Just because phishing is common, doesn't make it sophisticated.

[ Parent | on HN ]

Re:We [Reddit] had a security incident. Here’s what we know by dvngnt_ on Thursday February 09, 2023 @09:34PM (#34734941)

spearfishing is

[ Parent | on HN ]

Re:We [Reddit] had a security incident. Here’s what we know by lvxferre on Friday February 10, 2023 @12:01AM (#34735810)

>Yes, it is sophisticated. Phishing emails are opened more often then regular mail and click-rate is pretty high.

You're confusing "sophisticated" with "efficient". Phishing is efficient but unsophisticated; it boils down to one of the oldest tricks ever, to make you believe that $foo is $bar.

[ Parent | on HN ]