Post AtBcLTOZTsovknHcYa by murtaugh@mastodon.social
 (DIR) More posts by murtaugh@mastodon.social
 (DIR) Post #AtBB9TWkT2HBvRA8ci by futurebird@sauropods.win
       2025-04-17T10:35:02Z
       
       0 likes, 0 repeats
       
       I really appreciate it when people who get hacked talk about it after and describe how it happened. EZlilyy is a pretty big "cozy gaming" youTuber/streamer. She outlines how an offer to promote a game was used as bait to get her to download some kind of pdf signing software that hacked her account. It's easy to second guess, this kind of response is part of why people don't often share these experiences. Some one will say "you idiot you should have..." https://www.youtube.com/watch?v=v0NZSbTDaQs
       
 (DIR) Post #AtBBGrSJtqryAKc4J6 by Lyle@cville.online
       2025-04-17T10:36:20Z
       
       0 likes, 1 repeats
       
       @futurebird If everyone did this social engineering would die
       
 (DIR) Post #AtBBlnjJno6naTJj5U by futurebird@sauropods.win
       2025-04-17T10:41:59Z
       
       0 likes, 0 repeats
       
       @Lyle Telling everyone about their little scam games is one of the meanest things you can do to these people. Anyone can get fooled, or have a bad password, or forget to do the due diligence. But you need to be brave to tell everyone just what happened so now this scam is going to be much less likely to work on others.
       
 (DIR) Post #AtBBmx4MZ284qIi2FM by david_chisnall@infosec.exchange
       2025-04-17T10:42:08Z
       
       0 likes, 0 repeats
       
       @futurebird She outlines how an offer to promote a game was used as bait to get her to download some kind of pdf signing software that hacked her accountI find it really hard to blame users here.  If you can't download a program and run it without it having full access to all of your data, the OS designers are to blame.  The principle of least privilege is at least fifty years at this point.  A program that you run should have no access to any of your data unless you explicitly grant that access.
       
 (DIR) Post #AtBcLTOZTsovknHcYa by murtaugh@mastodon.social
       2025-04-17T15:39:43Z
       
       0 likes, 0 repeats
       
       @futurebird this happens pretty regularly and for someone like her to fall for it is evidence that this must be a pretty sophisticated scheme, as I'm 100% certain this has happened to someone she knows.