Michał "rysiek" Woźniak · 🇺🇦 on Nostr: I've been doing information security for more than a decade. I have trained people, ...

I've been doing information security for more than a decade. I have trained people, written organization policies, built systems with security in mind.

And yet a few days ago I almost lost money to a phishing campaign pretending to be my infrastructure provider asking me to "update my payment details."

I was tired. I clicked the link, followed the instructions.

What saved my bacon is that I opened the link in a private-mode browser window, where I was not logged into my provider's system.