This will be a quick post. We have received a phishing mail to our info@lemmy.world mail address telling that they are “lemmy.world Security Team”, telling that they will “disconnect” your account from our instance. This is ofc, not us. Do not fall for it! The attached image is how the mail looks like.

~Lemmy World Team.

  • dependencyInjection@sh.itjust.works
    link
    fedilink
    arrow-up
    39
    arrow-down
    1
    ·
    1 year ago

    Isn’t it a waste of time trying these scams on lemmy.

    I could be wrong here but I would argue the vast majority of users are somewhat tech proficient since it’s not reached mass adoption and the user base is well, just us nerds?

    • Bitrot@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      27
      ·
      1 year ago

      Tech folks still fall for phishing. It takes a momentary lapse, failure to caffeinate, it happens.

      Lemmy is currently full of newly registered domains with weird suffixes, the kind that traditionally have been a phishing indicator. Lemmy.world is going to be harder to phish than some of the other ones where you have to read closely.

    • SgtAStrawberry@lemmy.world
      link
      fedilink
      arrow-up
      19
      ·
      1 year ago

      Well one of the best scam hunters on YouTube lost his account to a scam. So not really a waste of time, trying Lemmy.

      • Hazzia@discuss.tchncs.de
        link
        fedilink
        arrow-up
        5
        ·
        edit-2
        1 year ago

        There’s also variable levels of sophistication for scam messages based on the desired target. If you’re looking for a whole lot of people who don’t understand technology enough to see through your premise, you go with the generic “hello sir and/or madame I am hackor send gift cards or I will delet ur phone”.

        If you’re after a very specific person who is well known to be privy to the normal red flags, you’re more likely to create a custom spear phishing campaign and mimic as closely as possible the format, lexicon, domain names, etc of something reputable to avoid setting off their BS detectors.

        With that said, yeah there’s enough people on lemmy that this low-effort take is worth a shot