News for hackers. Stuff that matters.
Re:Kobold letters: Why HTML emails are a risk to your organi... by bambax on Thursday April 04, 2024 @10:21AM (#39930756)
> I just mean the people that fall for phishing don't need this sophisticated of an attack to fall for

Yes. It's more of the opposite. It's a well documented fact that the most obvious/ridiculous scams work the best, because they help select the most gullible potential victims.

https://www.microsoft.com/en-us/research/publication/why-do-...

Re:Kobold letters: Why HTML emails are a risk to your organi... by comicjk on Thursday April 04, 2024 @12:02PM (#39932166)
That analysis is from the perspective of the scammer. The scammer has limited time to write to each victim once the responses come back from the initial mass-email, so the scammer is better off if only the most gullible people reply. From the perspective of the person being attacked, the counterintuitive result based on selection bias goes away, and a more convincing scheme is more of a risk to you personally. (The assumption that scammers have limited time to write to each victim may itself become less true because of LLMs.)
Re:Kobold letters: Why HTML emails are a risk to your organi... by izacus on Thursday April 04, 2024 @02:59PM (#39934452)
That doesn't mean those scams are actually commonly successful.
Re:Kobold letters: Why HTML emails are a risk to your organi... by n2d4 on Thursday April 04, 2024 @03:43PM (#39934926)
This is only true for high throughput spam e-mails, such as those sent to literally every e-mail address in a large data breach. Corporate phishing attacks are much, much more advanced.