Terence Eden

@edent.tel

Longer hair than you. Chaotic Good. Doesn't work for The Man™ any more. If you're involved in Blockchain or Crypto you will be blocked on sight. All content © and personal. May not be reproduced without consent. Blog https://shkspr.mobi/blog

You visit hsbс-bαnk .xyz from a phishing message. You type in your username & password. The fake site sends them to the *real* bank. Then it asks for your 2FA code - you type it in. The fake site uses your code to log in to the real bank. 2FA will *not* protect you in this scenario! So what does?

This is a decent article about staying safe online, but it contains a classic & non-obvious mistake. www.theguardian.com/money/2026/s... How do you stay protected when you click on phishing link? "Put in place two-factor authentication […] which means you have two steps to log into a site." No!

Reαd carefully: how to spot – and avoid – a homoglyph attack

Scam emails are increasingly using psychological tricks, such as using near-identical URLs such as miсrosoft.com

theguardian.com

This is a decent article about staying safe online, but it contains a classic & non-obvious mistake. www.theguardian.com/money/2026/s... How do you stay protected when you click on phishing link? "Put in place two-factor authentication […] which means you have two steps to log into a site." No!

Reαd carefully: how to spot – and avoid – a homoglyph attack

Scam emails are increasingly using psychological tricks, such as using near-identical URLs such as miсrosoft.com

theguardian.com