Reply to thread

Message

<blockquote data-quote="simmerskool" data-source="post: 1126693" data-attributes="member: 61091">from personal experience yesterday -- seemed like a &quot;coordinated&quot; phishing attack. I have Netflix app via AppleTV devices. Every so often there&#039;s an update that requires user to re-enter credentials to access Netflix. This happened yesterday and at the same time, I got an email from &quot;Netflix&quot; saying I needed to update my billing on my account. Seemed plausible, eg, credit card might expire... The email looked legitimate, although I did notice that it was delivered to an older email address I rarely use, but I have had Netflix for a long time. The hyperlink ink in the email looked legit and read as Netflix but in reality it resolved to a clearly non-netflix URL that VT showed as bad. Easily seen if user first copies the hyperlink into a text editor, but click it from email takes you to the bad place. Given the context of Netflix really needing an update, must admit that I was somewhat fooled by this email. Interesting how the attacker seemed to coordinate this with Netflix app requiring updated credentials. Bad guys are getting better. (or I let my paranoid drop <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite126" alt=":ROFLMAO:" title="ROFL&nbsp; &nbsp; :ROFLMAO:" loading="lazy" data-shortname=":ROFLMAO:" />)</blockquote>

[QUOTE="simmerskool, post: 1126693, member: 61091"] from personal experience yesterday -- seemed like a "coordinated" phishing attack. I have Netflix app via AppleTV devices. Every so often there's an update that requires user to re-enter credentials to access Netflix. This happened yesterday and at the same time, I got an email from "Netflix" saying I needed to update my billing on my account. Seemed plausible, eg, credit card might expire... The email looked legitimate, although I did notice that it was delivered to an older email address I rarely use, but I have had Netflix for a long time. The hyperlink ink in the email looked legit and read as Netflix but in reality it resolved to a clearly non-netflix URL that VT showed as [B][U]bad[/U][/B]. Easily seen if user first copies the hyperlink into a text editor, but click it from email takes you to the bad place. Given the context of Netflix really needing an update, must admit that I was somewhat fooled by this email. Interesting how the attacker seemed to coordinate this with Netflix app requiring updated credentials. Bad guys are getting better. (or I let my paranoid drop :ROFLMAO:) [/QUOTE]

Verification