A student we'd locked for their account sending out phishing emails asked us what happened. I don't know how to tell somebody who hasn't already guessed they got phished "you got phished" without it also sounding a bit like "... you fucking idiot" in my head. Even though I don't at *all* think that, I *know* how good phishing attacks can be and I never blame people for it happening. :(
@georgieboy Our latest finphishing cloned someone's signature block, too, which shows some reasonably decent advance scouting. I was a bit alarmed by that; with some more work they could have made it very hard to tell in typical mail clients.
@cks Yeah, we’ve seen that one occasionally too.
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!