it sucks, we're still trying to contact discord and get it fixed. but i wanted to take a second to point out how it happened, because the method they used was a lot more advanced than what i've seen before.
"if you're reading this and you aren't convinced you'd fall for this: beware! i almost fell for this one, and i'm one of the most paranoid computer users in my friend groups! these scams only ever get craftier and more convincing. use your head, trust your gut, don't click links."
Thankfully, I have never been "truly" phished/hacked/etc.
However, the various places I've worked over the years will, to make sure people are paying attention/staying diligent, send out simulated phishing attacks. If you click one, you're basically told "YOU FAIL!" and have to go through some kind of "cybersecurity class" (The e-mail for which, incidentally, shares many of the same red flags as the simulated phishing attempt you fell for, but that's a separate discussion).
I am not ashamed to admit I have been Sim-Phished and had to take those classes.
Multiple times.
You probably, in your head right now, have a stereotype of the kind of person you'd think would fall for this, let alone multiple times. I don't think I fit that stereotype.
And yet.
To be clear, the classes weren't anything I didn't already know. But it just takes one moment of weakness. A lapse in concentration--maybe you're coming back from a vacation mindless clicking through your e-mails and something catches your eye. Maybe you're stressed out thinking about other things and your Spidey Sense isn't going off when you get that Discord DM from a known friendly account. Any number of other factors.
My point is, you are not immune to this, and perhaps almost as importantly, getting scammed is not a sign you're stupid or a shame point--these scams and phishing attempts are good. The second "Sim-Phish" that got me also got a lot of other people at the company I work for, none of whom I would call stupid.
Seriously. Stay safe and vigilant out on this wild Internet.
There are a lot of people who think being vulnerable to something proves something it doesn't.
- People who think crafting a research paper that is false ever being accepted is proof that that scientific field is not real.
- People who are judgmental about being hacked thinking only dumb people get social engineered.
- People who think being sick is a moral failing.
- People who think being poor, or close to poor, is a moral failing.
This is all foolish behavior. Being vulnerable is partly a function of the system you are in, and partly a function of the system you are. People with kids are more likely to be sick. People under stress are more vulnerable to social engineering. People in a capitalist society without safety nets are more vulnerable to poverty.
Techniques that are taught and practiced to the point of unconsciousness are the best weapons, but nobody is invulnerable. No judgment, just helping people improve their technique.
