Bill Rebel

New scam attempt today by someone who was so excited they couldn't even wait for Phishing Phriday 😂. I received the below email (first pic) from what is, in fact, a legit Facebook domain. Checking the headers all authentication seems good (SPF, DKIM, DMARC) and Microsoft (my email provider) had vetted it as good. It felt weird though so I manually copied the "user name" it came from into a browser window to see and boom...a completely spoofed Meta Privacy page. 2nd photo is the real one with no spelling or grammar errors and active menus that can be collapsed and expanded. 3rd image is the bogus page..note the gibberish at the bottom and static menus, none of which are active or lead anywhere. Nice try, scammers..not today though!

If you were to be fooled by the poor graphic design of this email and looked at the address it emanated from "[email protected]" you might consider it to be legit as that is, in fact, an email address Apple uses and will contact people from. Key difference here is that the mailer-daemon is an unmonitored service that will only email you when an email you've sent someone else bounces. These 🤡s are using it to try to get me to enter my payment details, which they of course will then use to buy stolen iPhones and Xbox gift cards. Not today, my friends....not today.

Another day, another phish attempt. This one also looks legit, no silly spelling errors or jumbled words but this one was easy to spot by clicking on the "reply to" field. Microsoft would obviously never be sending email from a gibberish email address like this. Send to trash, do not click link, do not pass go, do not collect $200. Stay on your toes folks!

Very, very, VERY good phishing email to me from "PayPal", which seemingly emanates from a legit PayPal email address. Inspecting the full headers it even passes SPF, DKIM and DMARC authentication. I've seen a lot of good phishing attempts but this one is right up there. What gave it away for me was the noreply22@ in the address and the fact that 805 isn't a toll free area code, but an area code in California's wine country....it's surely a VOIP line set up to run this scam. Not only could I end up losing $823.19 if I had called but I'd have to pay long distance for the privilege of doing so 😂. Stay vigilant out there folks!