3 ms·

Did the author huff glue before writing this? `The results were unsettling.` The provided example basically says. "Hi, I have no pre-existing relationship wit

• elmomle 3y ago
  Writing a convincing email is one of the more time-consuming parts of a spearphishing attack. Any competent cybercriminal would have their own script that finds a closest-available match to the actual CEO's email and use that. If they can automate the part that used to take research, the average script kiddie now isn't that far from being able to brute-force scam most companies that have an online presence. That said, I don't want to evoke too much alarm. The business side will evolve as well; that's how these things go. Maybe by enforcing very strict protocols on link-clicking and money-sending, maybe by something that automates such enforcement. Or maybe something stupidly simple like your email warning you that this email address is one that you haven't seen before but looks like a near-clone of one you have seen. To which the scammers would then adapt, etc.
  • LightBug1 3y ago
    "Maybe by enforcing very strict protocols on link-clicking and money-sending, Hope beyond hope ... in a world where I still encounter firms who have the same simple password on all machines and many different logins "just because" ... the quiet part: "we're busy and couldn't care less, and I need to get this document ready by the next meeting".