The Phishing Website that Hacked Linus Tech Tips

WATCH MORE:

🔥YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!

[JorgeALXNDR]

The little detail of saying your password is incorrect at the first try is so freaking clever. I have in the past, as a garantee, put a wrong password first just to make sure it was an official website, since if it wasn't it would never know it was wrong. I'm ditching this behavior. They know.

[FlushDesert]

"You ruined my job" "People will no longer believe in this method" Good!

[McZarya]

The hacker sending you a phish to talk is hilarious

[swilson]

Saying you typed the wrong password first and having them try again is a very clever way to get more than one password from the victim! How many times have you heard a user say “I could have sworn that was it, let me try something else.” The bad actor is very likely to get at least 3, if not 4 good passwords from these victims as the new passwords they try are probably in use somewhere else. WOW

[TarenNauxen]

Any time I see a space before punctuation, I get very suspicious

[MrTheSmoon]

i love the idea that the hacker is mad at your specific video as if linus getting phished is not way more impact full for public awareness of phishing.

[iCortex]

these variable names scream "19 year old learning to hack" and it's hilarious ... "cookieGGbro" hahaha

[CZTachyonsVN]

To people (in the comments) surprised that Linus could fall for such an obvious phishing scam and saying that he has no cybersecurity awareness: Just remember that Jim Browning, one of the best anti-scam YouTubers, who reverse engineers scams for living, and cybersecurity specialist, also fell for a simple phishing scam. It’s all obvious only in hindsight.

[gigachadster]

"Do you have any advice for me to improve my phishing method?"

Lmao lil bro was still hustling

[ares]

2:39 obsessing about the differences between fake and phishing email is pointless. They are close enough that 90% of users will not notice and it's easy for the hackers to make them look even more similar if need be. For all intents and purposes they are virtually indistinguishable.

[jamiealeksic]

Daily reminder that if you aren't going to hover check links at least look at the domain you are on before you sign in on any important accounts

[Swank]

That email you received with the note is amazing. Shows you how much they watch and see how long until they are called out. All the publicity they received caused the page being removed resulting in 404 page.

[DUDA-__-]

Respect to him for beeing so open about the whole ordeal. All those people blaming him for falling for it are the reason people are ashamed for falling for phishing. If people are ashamed they don't seek help.

As someone who had to handle multiple phishing related security incidents at a company, those people saying he should've known better are the reason normal workers, even if they realised they f'ed up, don't go to get help.

[MotSter]

So .."How this happens" is Not only Infostealer Malware but also as in this case a typical phishing attack. Good stuff

[emildavidsen]

@ 6:00 Notice the Language class list. English, Dansk, Norks(Norwegian, correctly spelled Norsk), Turkish(In english, and not in Turkish which would be Türkçe), Suomi(Finland), , Espanol, Deutsch, Polski, Romana(?). Its just a funny collection/set of languages with clumsy mistakes in them...
Edit: mistaken Finnish spellling.

[labbiee]

I feel like it really doesnt help the situation that a lot of these companies use different domains and subdomains for the authentication

[aMaff]

That tidbit about using your password manager as another red flag for "you're not where you think you are" is really good advice.

[glitchy_weasel]

If you get a unrecognized login email, don't click the link on the email and always manually go to the website in a new tab and reset the password from there. If it was real, then you changed your password which is the same - and if the mail was fake, well you just changed your password which never hurts.

[Crysal]

With falling for phising or other stuff like that, I use to say something like: "To not get compromised you have to get lucky everyday, but for the thread actor to compromise you, they have to get lucky once"

[SonicManEXE]

Saying “I’m not ashamed of my job” is a funny way of admitting “I don’t care that I’m a criminal”