Worst week of my life with a phishing attack at work

Last Tuesday I got an email that looked exactly like our payroll provider. I clicked the link and typed in my login before I realized the URL was off by one letter. Within 2 hours someone had tried to change my direct deposit info. HR caught it but I spent the whole week resetting every password I own. Has anyone else had a close call like that with a fake email that looked too real?

4 comments

Log in to join the discussion

Log In

4 Comments

charlies373mo ago

First one that almost got me was a bank alert at 2am... looked just like Wells Fargo down to the logo. I was half asleep and typed my password before my brain caught up. Then I sat there staring at the screen feeling like an idiot for five minutes. These people are getting scary good at copying the real emails.

4

max_cooper213mo ago

Turning on two-factor authentication after that did it for me... now even if I slip up, they can't get in without that code from my phone. Still makes me feel dumb every time I almost click something though.

5

robinp893mo ago

@violag80 what was the specific domain name that tipped you off?

1

violag803mo ago

I used to be one of those people who thought "well I'd never fall for that, I'm too careful." Then a couple months ago I got an email that looked like it was from my credit union, right down to the little footer at the bottom with the fraud department number. I clicked the link and put in my username before I caught the domain name was slightly wrong. It scared me so bad because I realized how easy it is when you're distracted or rushing. That one close call completely changed my mind about people who get caught by these things. It can happen to anyone if the fake is good enough and the timing is right.

2