Quick phishing demo. Would you fall for something like this?
Conversation
Nah, I don’t thinks so. but it looks very well done... so not sure. On the other hand 2fa FTW
2
14
Show replies
(this is why we reduce passwords and encourage the use of 2fa on primary accounts - using that button in most cases *won't* and *shouldn't* ask for a password)
2
3
81
Couldn't a sophisticated phishing page make requests to Google behind the scenes, and make you type your 2FA code on the phishing site?
6
1
58
Show replies
I wouldn’t. I use 1 password with autocomplete. If it doesn’t autocomplete I become instantly suspicious. I encountered this kind of phishing before, 1p FTW :). Still all my passwords are unique, 30 characters long with symbols, case and numbers. Also I use 2FA where available...
2
30
Show replies
That’s complicated.
Now try figuring out which of these two has an L:
MICROSOFT.com
MlCROSOFT.com
(This is why phishing is hard for humans. And easier for computers to catch at .)
16
One more reason why password managers are important: they wouldn’t fall for it.
That's certainly one of the better ones I've seen. I could see many people just quickly clicking through.