TLDR Web Dev · MISCELLANEOUS

TROY HUNT: THANKS FEDEX, THIS IS WHY WE KEEP GETTING PHISHED

troyhunt.com7 min read

Summary from the TLDR Web Dev newsletter

FedEx’s legitimate SMS and email messages contain numerous red flags typical of scams: typos, strange capitalization, no currency info, and suspicious domain names for payments. Its payment site allows users to change tracking numbers and amounts via simple URL manipulation, making it feel like a phishing site.