Get the latest tech news
My bank keeps on undermining anti-phishing education
TLDR: my bank sent out emails with websites which looked a lot like phishing mails, so much so that this similarity could potentially be used against them legally by potential phishing victims – Discussion at hackernews (soon) Chapter 1: You’ve got mail As I was writing my first post some weeks ago, I got an email from my bank in my inbox:
Each Sparkasse is an independent institution, but they are all connected through an umbrella organisation, which coordinates their activities, ensures interoperability and gives it an overarching corporate design. You can win quite a large sum of money The prize draw without context (more on that later) Contains a link to a domain unrelated to my bank (“gewinnen-mit-wero.de”) The text in the subject and the body are very generic and tonally like phishing emails. When a trusted institution, like a bank, uses similar practices, it completely undermines everything we try to teach users, especially since we are talking about the largest financial service provider in Europe [^1]!
Or read this on Hacker News