We Got Hacked AGAIN

Thanks to Secretlab for being the title sponsor of LMG Clips this year! Check out their ergonomic gaming chairs at the link above. Your back will thank you!

Linus gets Phished and the LTT Twitter gets hacked.


FOLLOW US ON SOCIAL
---------------------------------------------------

[insignia]

We sent out a fake email to the clients of the workplace I currently give more then half my life to for little pay.
90% of the people clicked on it. I am now in charge of explaining to 4356 people on why they shouldn't click links in emails and how to tell when an email is fake.

[stillmoms]

The “they caught me at exactly the wrong moment” part is crucial. No one is “too smart” to not fall for something like this if they’re caught in just the wrong moment—usually when they’re under some sort of other time pressure and stress and therefore aren’t thinking clearly. It happened to me with my Apple account on one particularly hectic morning when I was late for work, and I’m a 30 year veteran of “using computers on the Internet”. It only takes one perfect situation to catch you off your game to leave you with a mess to clean up. The good news is if you’re using a password manager and unique passwords for every service (including your password manager), it’s less likely something like this will totally ruin you.

[AlansWayDPrinting]

There was a CEO of a cybersecurity company who got caught by their own internal Phishing testing and had to go for internal company phishing training. It can happen to anyone when their alertness drops. We have to be vigillent everytime, the hackers only have to be successful once.

[TiagoTiagoT]

You guys should start a tradition of yearly pentesting, hire a company that does all the stuff, lockpicking, phishing, hacking, social engineering etc, and let them pick a time and date without telling anyone they don't need to, and have a separate crew to follow them (or have them carry bodycams or whatever and be interviewed later or whatever format works), to get an infosec documentary video as a bonus :)

[Andrei-ngyz]

For the first time in history, the grill has become an element of a hacker attack ))))

[ICEconchy]

Phishing can happen to anyone, its just human error. Glad to see its back!

[dany_fg]

one of my family members was part of a cyber test at their workplace and they clicked the phishing mail link.
somehow the site didn't load and later the cyber security team congratulated them on not falling for the phishing attempt.

[Dirtyz]

If it makes anyone else feel better, my wife is now (today) the type of person to click on a text message link because "USPS" was unable to deliver a package and then proceed to enter our credit card information 😤

She told me to check the mail for a package that she was having an issue with and I asked her if she clicked on any links... Our cards are now cancelled 😂

[Decodeish]

NOTE: Password resets should NEVER ask for old password.

[BrandonIngli]

15:00 Also be careful that you're looking at the actual site for whatever business you're interacting with and *not* an ad placed by a bad actor nor an AI generated summary containing bad data.

[chad_levy]

This is among the reasons you use a password manager. Even if you know your password, your password manager will validate the URL.

[RageofaNation]

Don't even google the number to your bank. Check the back of your bank card.

[TheCloudCreation]

It's important to mention that even if you try to navigate to the website manually, to never click on the "sponsored" result for whatever website you are searching for. I cant remember which company it was, I think it was MSI, but a phishing site was getting the top search result whenever people looked up a gaming peripheral company to download their application to control their peripherals and the site had almost exactly the same url and copy and pasted the real MSI api download site so it was virtually indistinguishable.

[fakjbf]

“a whale is not a fish” unless you classify all vertebrates as fish, a there’s a very good argument for doing so.

[afd]

I've been getting realistic paypal emails lately. They skip my junk mail folder and everything. Pretty much do what they say. I log in to paypal not using the link in the email, see there's nothing there, and forget about it. I could definitely see how someone could fall for it though.

[deasterbrooks]

Moral of the story is anyone can get caught if they catch you at the right time (wrong time). I almost got nabbed by one when I was at a party...it is so easy to have it happen if your distracted by something going on around you.

[mzuogha]

8:30 lmao "fool me twice, shame on you" pie

[ajealicethefemme]

Luke teaches internet security for 25:44 haha. This is really nice to hear from the channel, as this is advice that we need to give to so many people who aren't as tech literate or knowledgeable as we are. Having a video to say that even the greats fall short sometimes, and then teach ways that many people can protect themselves would be brilliant!!

[DoatesndMore]

The amount of bots in the comments wtf...

[saskmuddinatv]

I am genuinely surprised Linus fell for this. That's rule #1 never follow links through emails.