Beware scam tells are back

[Allmightpool]

DO NOT CLICK ON LINKS FROM RANDOM PEOPLE SAYING YOU CAN WIN GIL!

Just received from Phae Valentine @Diabolos
"300M raffle giveaway starting in 15mins, post a number from 1-30 on FFXIV forum thread to enter: <links to fake site> "

Looks real has .com-dc.top/ffxiv/forums/#

Tell your FC mates

[Rehayem]

That's how the cycle of phishing continues, that Phae Valentine had their account compromised because anybody would like to win 300m gil for free. The phishing scam bypasses 2fa as well.

[NegativeS]

I still don't entirely understand how people fall for this stuff. You'd think MMO players of all people would be wise enough to at least look at random links before pasting them into their browser?

[rawker]

... how people fall for this stuff....

Greed......

[LilimoLimomo]

I still don't entirely understand how people fall for this stuff. You'd think MMO players of all people would be wise enough to at least look at random links before pasting them into their browser?

Phishing is genuinely very interesting, and I think part of why I find it so interesting is that to understand phishing you need to come face-to-face with the falsehood of some of the myths we're accustomed to believing in our culture.

First off, we can talk about stereotypes like "MMO players". In reality, "MMO players" are far from a monolith. All kinds of people play MMO's, including people who don't know much about internet security. Grandparents who have finally decided to try out this Internet thing, kids who are too young to know better, folks with mental impairments that leave them vulnerable, and of course people who have just somehow fallen through the cracks and never learned about internet security. We've got an image in our minds of what an "MMO player" generally is, and even if statistically that image represents the most common type of player, it doesn't truly represent the whole of the group, which will inevitably be more diverse.

The second thing that I think is interesting is how often we think of people as being static or constant. Like, I think of myself as pretty cautious when it comes to the Internet, so no way am I going to fall for such a scam. And maybe in general that's true! But I'm also a person, and people's capabilities vary over time. If you've had a rough day, if you're sick, if you're distracted, if you're stressed...there are so many things that can come between a person and the level of capable judgment that they are generally capable of. So you don't even have to rely entirely on phishing someone who's uneducated, because even an educated person can fall for a phishing attempt if it happens at the right (or from our perspective, wrong) time.

There's a reason why most companies train and drill their employees about phishing (etc) multiple times a year: because even the best of us can fall for it. At the last company I worked for, I remember seeing the results of an unannounced phishing test, and even a few employees on the IT teams clicked the fake link. Personally, I don't buy that these people were idiots, nor were they uninformed on the subject matter. I think what's far more likely is that they were busy and trying to juggle more than their human brains had the bandwidth for. In their efforts to keep up with their day-to-day, they overexerted themselves and something fell through the cracks.

And I think many of us are at risk of similar outcomes. We're all trying to maintain relationships and responsibilities and schedules and hobbies, and to me it's no wonder that in an effort to try to manage it all we open ourselves up to risk and mistakes. The people who organize phishing schemes recognize this. They know that most of the time, most people won't click. But they also know that with the right circumstances, some people will, so if they cast a wide enough net, they'll catch something.

Anyway, a bit of a ramble, but hopefully some tasty food for thought. ^-^

[Jojoya]

I still don't entirely understand how people fall for this stuff. You'd think MMO players of all people would be wise enough to at least look at random links before pasting them into their browser?

Players new to online games aren't going to have a clue. They probably aren't aware of how common scamming is until they or one of their friends is affected.

There's little education about using the internet available despite the internet being a normal part of daily life for most people now. When there are no awareness classes or campaigns, it's not that hard to understand why so many fall for the scams.

[EusisLandale]

Players new to online games aren't going to have a clue. They probably aren't aware of how common scamming is until they or one of their friends is affected.

There's little education about using the internet available despite the internet being a normal part of daily life for most people now. When there are no awareness classes or campaigns, it's not that hard to understand why so many fall for the scams.

I miss the days where "everyone is lying to you until proven otherwise" was understood about the internet, even if it was expressed with things like "the women are men, the men are children, the children are cops."

[ArchlordPie]

I miss the days where "everyone is lying to you until proven otherwise" was understood about the internet, even if it was expressed with things like "the women are men, the men are children, the children are cops."

Somehow in the span of the roughly 20 years I've actively used the internet, we've gone from "don't trust everything you see on the internet" and "the men are men, the women are men, and the 14-year-old girls are FBI agents" to "the government needs to control what people put on the internet because too many people are lying on it" and... well, I'd probably get banned for that other joke.

Point is, IDK why people are still so focused on being a progressive society, when it's pretty clear to me that we've been progressing in the wrong direction for quite some time.

[tempRawr]

Whenever I get one of those, I just throw on a VPN, open the link in incognito, and drop the entire Shrek script into the fake password field. For reasons beyond my understanding, it seems to bring down the front end of the phishing site shortly afterwards.

EDIT: You can also report them to Cloudflare if the site is using it for DDoS protection. They can't take it down, but they'll put up a phishing site warning for people who try and follow the link.