Is anyone getting phishing mails via an email address used at the 38c3 public wiki (e.g., for ticket exchange)?
@damatrix@mastodon.social, @dukp, @morph, and me already encountered #scam attempts with fake #38c3tickets in December. I guess that now the scammers try to do the #aftermath for phishing #38c3 fellows:
I got a message on 12.5.2025 6:50 allegedly from T-Online (Magenta) about an invoice total that couldn't be collected, which provides a link to a bing search result redirecting via kbm78.info and https://nwhc.co.za/about.html to a stripe payment form.
For further investigation and discussion, I share the source of the .eml file at https://paste.systemli.org/?89ddf91c3aa3637a#FNYCYYuAaKpYf7tu9J5cPDfw9xDfTxFnFqFe4G4encb1
#fedipower