mastodon - Link to source

Check out this SendGrid account phishing message I received today.

The email claims that SendGrid will be adding a 'Support ICE' link to every email sent via their platform.

Of course 99.99% of orgs would want to opt-out if it were real, so this is an incredible lure to get SendGrid creds.

Also, if the bad guys are using opting out of supporting your organization as a lure, you know you done fucked up.

#infosec

Phishing: We're writing to inform you of an important update to our email platform in response to recent events. As part of our commitment to supporting U.S. Immigration and Customs Enforcement (ICE), we will be adding a "Support ICE" donation button to the footer of every email sent through our platform. This button will appear automatically in all outgoing emails starting next week. What This Means for You All emails sent from your account will include the Support ICE footer element Recipients can click to donate directly to ICE support programs This change helps us demonstrate our platform's civic commitment Opt-Out Available If you prefer not to include this footer in your emails, you can disable it in your account settings.
#infosec
⇧