4 ms·

I recently received phishing texts from someone pretending to be UPS telling me that my delivery had been missed and I’d need to pay to reschedule it. The websi

by kbos87 3y ago

I recently received phishing texts from someone pretending to be UPS telling me that my delivery had been missed and I’d need to pay to reschedule it. The website I was taken to was remarkably polished, it looked almost exactly like the real UPS site. The thing I couldn’t stop ignoring is that it was perfectly timed the day before I was expecting a UPS delivery. It could have been coincidental but I doubt it.

valine 3y ago
I got one of these yesterday, I have a warrantee replacement item coming in the mail for which I had to verbally dictate my address. Seriously made me think twice, they couldn’t have timed it better. Their domain name is sketchy AF though.
trafficante 3y ago
Same here. The combo of “actually having an important package scheduled” plus a convincing phishing page easily hijacked my brain into filling out the personal info form without even checking the full domain. I only snapped out of it when it asked me for a credit card number. Quite probably the first mass phishing scam I’ve fallen for in nearly 20 years. Kinda horrifying to think how many non-tech people have gotten caught up by this.
thephyber 3y ago
> The website I was taken to was remarkably polished, it looked almost exactly like the real UPS site "Fake Login Page" site generating scripts are pretty close to slightly customized versions of "Save Page As..." (plus some find/replace logic to fix domains, JavaScript, etc). They have been around for at least 2 decades. The big logistics companies (USPS, UPS, FedEx, DHL) almost certainly all have FLP generator scripts that are optimized for each one of them by now. I worked at a social media company and our developers were constantly watching the FLPs that targeted our users. We both built countermeasures so they stopped working and helped mitigate the damage to accounts that we knew were scammed by the FLP sites.
- mrguyorama 3y ago
  "Back in my day" It seemed like setting up a copy of a site for phishing purposes was a single metasploit command.

by kbos87 3y ago

valine 3y ago

I got one of these yesterday, I have a warrantee replacement item coming in the mail for which I had to verbally dictate my address. Seriously made me think twice, they couldn’t have timed it better. Their domain name is sketchy AF though.

trafficante 3y ago

Same here. The combo of “actually having an important package scheduled” plus a convincing phishing page easily hijacked my brain into filling out the personal info form without even checking the full domain. I only snapped out of it when it asked me for a credit card number. Quite probably the first mass phishing scam I’ve fallen for in nearly 20 years. Kinda horrifying to think how many non-tech people have gotten caught up by this.

thephyber 3y ago

> The website I was taken to was remarkably polished, it looked almost exactly like the real UPS site "Fake Login Page" site generating scripts are pretty close to slightly customized versions of "Save Page As..." (plus some find/replace logic to fix domains, JavaScript, etc). They have been around for at least 2 decades. The big logistics companies (USPS, UPS, FedEx, DHL) almost certainly all have FLP generator scripts that are optimized for each one of them by now. I worked at a social media company and our developers were constantly watching the FLPs that targeted our users. We both built countermeasures so they stopped working and helped mitigate the damage to accounts that we knew were scammed by the FLP sites.

mrguyorama 3y ago
"Back in my day" It seemed like setting up a copy of a site for phishing purposes was a single metasploit command.