TLDR Dev · MISCELLANEOUS

THE SCARIEST “USER SUPPORT” EMAIL I'VE EVER RECEIVED

devas.life3 min read

Summary from the TLDR Dev newsletter

This dev received a suspicious user support email claiming a cookie consent issue on his app's website, which doesn't actually use cookies. The sender provided a link disguised as a screenshot, leading to a Captcha that, upon completion, prompted Takuya to run a dangerous command in his terminal. This command would have downloaded and executed a shell script from a remote server, a phishing attempt.