4 ms·

I submitted a claim with Oxford (UHC subsidiary) and got the most “I can't believe it's not phishing” email as a result. It came from a GoDaddy-parked domain (o

by paulgb 5y ago

I submitted a claim with Oxford (UHC subsidiary) and got the most “I can't believe it's not phishing” email as a result. It came from a GoDaddy-parked domain (oxfordteam.com), and it claimed to be a “secure message” in the form of an attachment. The crazy thing is, it was entirely legitimate. I kept a screenshot: https://twitter.com/paulgb/status/1390331121544671233/photo/1 https://twitter.com/paulgb/status/1390331121544671233/photo/...

mac-chaffee 5y ago
Ahh Cisco Registered Envelope Service! I reported that internally when I worked there, and I wasn't the first. You'd expect this to be just some ancient software, but I found an internal Jira where someone was provisioning dozens of new instances all the time as of 2021. It's so bad. It conditions users to open .html attachments from unexpected email addresses AND enter passwords into the webpage!