det.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon Server des Unterhaltungsfernsehen Ehrenfeld zum dezentralen Diskurs.

Administered by:

Server stats:

1.8K
active users

#Spam

15 posts15 participants0 posts today

Bloody spam has hit Mastodon:
@JohnDal 🚨 Automatic User Notification 🚨

Your account has been suspended. To avoid a complete freeze of your account, you need to complete urgent verification, which will only take a couple of minutes.

⏳ Time Limit: 30 Minutes
🔍 Required Action: Finish verification using the link below.

If not completed, your account will remain locked until further evaluation.

🔗 Verification Link: jshr.it/nO6a0g

Sincerely,
Mastodon Support Team
#Spam

jshr.itMake a link shorter in an instantThe fastest way to make and share a shortened link. Make a link shorter with a single click, no signup required.

Oh, da scheint mal wieder ein großer Jackpot im zu sein… denn die für die der kommt mal wieder in größerer Menge:

spam.tamagothi.de/2025/07/18/j (HTTP, nicht HTTPS!)

Es ist illegales Glückspiel, nicht das staatliche Zahlenlotto der BRD. Die Teilnahme ist eine Straftat. Die Veranstalter sind mindestens halbseiden, wenn nicht gar betrügerisch. Nicht darauf reinfallen!

spam.tamagothi.de🍀 Jetzt 11 € Glückskarte einlösen: 10 Felder LOTTO für nur 1 €! « Unser täglich Spam

Cyberkriminelle versuchen immer wieder, mit täuschend echt wirkenden E-Mails Vertrauen zu erschleichen – diesmal im Namen des „Bundeszentralamt für Steuern“. Die Nachricht wirkt wie ein amtlicher Bescheid und enthält augenscheinlich sogar offizielle Angaben wie Dateinummer, Untersuchungsbeginn und Absenderadresse. Ziel ist es, die Empfänger dazu zu bringen, den Dateianhang zu öffnen und den im Anhang (PDF) angegebenen Betrag auf das Konto der Betrüger zu überweisen.

teufelswerk.net/vorsicht-betru

Screenshot von der gefälschten, betrügerischen Mail mit dem Titel: "Das Bundeszentralamt für Steuern hat einen Bescheid an Ihre E-Mail-Adresse versendet".
teufelswerk | IT-Sicherheit & Cybersecurity · Vorsicht, Fake und Betrug: Gefälschter Bescheid vom Bundeszentralamt für SteuernCyberkriminelle versuchen immer wieder, mit täuschend echt wirkenden E-Mails Vertrauen zu erschleichen – diesmal im Namen des "Bundeszentralamt für Steuern".
#scam#fake#betrug

I recently found out that Sympl, a configuration system from @beasts, allows you to block whole TLDs as well as domains and addresses.

So far anything from:

*.biz
*.services
*.ai

gets rejected as part of the initial SMTP connection and therefore doesn't get stored anywhere on my server.

Is this a banking scam SMS?

shkspr.mobi/blog/2021/07/is-th

Earlier this week, my holiday was interrupted by a sophisticated SMS scam. Rude! Let's take a look at it.

Let's take a look at all the ways we can tell it is a scam.

Firstly, and most obviously, I am not a customer of Lloyds Bank! But these scammers send out to multiple people hoping to catch victims.

Secondly, I've not made a complaint to Lloyds! But, again, scammers know that plenty of people have. So this adds a touch of authenticity. If you were a Lloyds customer who had recently complained - you're now primed to accept the scammer's call and treat it as legitimate.

Thirdly, that phone number. If you call it, a recorded voice says "Welcome to customer services..." Whose customer services? It doesn't say "Welcome to Lloyds". This is likely a number that scammers put on texts claiming to be from HSBC, Lloyds, NatWest. Cheaper for them to have a single phone number.

Fourthly, the reference number. It is just my phone number! That's an unusual reference number for a bank.

There's some weird spacing between "Mr" and "Eden" - not what I'd expect from a professional message.

What do you think of the SMS? Would you flag it as spam? I asked my Twitter followers and their responses were unanimous.

Terence Eden is on Mastodon

@edent

I received this unsolicited SMS earlier today.
I don't bank with Lloyds.
What do you think of it? (Poll in next tweet.) pic.x.com/yh4OrBwfM6

❤️ 0💬 0🔁 216:21 - Tue 13 July 2021

Terence Eden is on Mastodon

@edent

Do you think that SMS from Lloyds is…
📊

⚠ Definitely a scam: (195)
195
😕 Probably a scam: (126)
126
🤔 Probably legitimate: (34)
34
😇 Absolutely fine: (13)
13 ❤️ 0💬 7🔁 016:21 - Tue 13 July 2021

A few minutes after receiving the SMS, I got a call from a Peterborough number - not the 0800 number. The phone number was flagged as suspicious (read the number's reviews).

After the customary pleasantries, the voice at the end of the phone said "Can you just confirm your name and address for me please?"

I replied that I didn't give that information out to cold callers.

"Completely understandable sir. If you check your messages, you'll see an SMS from us scheduling the call. Did you receive that?"

I replied that I get lots of spam texts and that I couldn't be sure it was legitimate.

We reached an impasse.

With a little subtle social engineering on my part, I found out the nature of the complaint. And then I realised... it was a legitimate call!

A few months ago, I'd complained to Halifax Bank that they were sending letters to someone who didn't live at my address.

The 0800 phone number is owned by Halifax

Lorraine Underwood

@LMcUnderwood

@edent Did Halifax bank turn into Lloyds… ??
Tweet from 2015 mentions that number ❤️ 0💬 1🔁 016:25 - Tue 13 July 2021

Halifax are part of Lloyds Bankings Group.

The geographic number I received a call from is the Lloyds outbound number.

In my defence - this did have most of the Hallmarks of a scam! Lloyds have tried to do the right thing by alerting me that the call is coming. They've provided a trusted phone number for me to call if I am concerned. They've given me the name of the caller, and a reference number.

But these are all things a scammer can do as well!

Lloyds could have made this better. Does the average user know that Halifax is part of Lloyds? I didn't. Why didn't the call come from the number that they'd sent in their text? Would a link to a simple URl like lloyds.com/contact have reassured me? How about lloyds.com/complaint/ref/123...?

Instead, several silly mistakes and my unhealthy paranoia collided and convinced me it was a scam.

What's the solution here? Sure, Lloyds can up their game - but a canny scammer can just tweak the wording and send out a convincing forgery. We can all abandon SMS and move to some cryptographically signed service which no one can use properly. We can hope that mobile networks crack down on SMS spam and only let legitimate messages through. Or users can dial down their paranoia - and hope for the best.

But, sadly, it seems that trusting messages from financial services are all but impossible right now.

Screenshot of text message from Lloyds bank. It addresses me by name and gives me the name of someone who is going to call me - plus their phone number.
Terence Eden’s Blog · Is this a banking scam SMS?
More from Terence Eden
#phishing#scam#sms

Die #Rufnummer 023319754910 probiert es als Belästigung #SPAM mit Abstand von 2 Tagen bei mir erst zum 2. Mal mich hinters Licht zu führen. Unter
telefonnummer.net/num/49233197
stellte ich vorgestern bereits fest, daß ich nicht der Einzige bin ( Belästigung)
Ich trag brav den Widerling ( Hagener Nr) in meine TK-Router Blocklist ein. Und fertig.
Aber schneller wäre das Nachsehen wohl hier im Fediverse . Wer kennt eine Sammelstelle im Fediverse gegen #TelefonSpam ?

+4923319754910, +49 2331 9754910 ☎ Verdacht auf Spam aus Hagen (Westfalen) (10 Meldungen)
Hello World Digital+4923319754910, +49 2331 9754910 ☎ Verdacht auf Spam aus Hagen (Westfalen) (10 Meldungen)Wem gehört die Nummer +4923319754910 aus Hagen (Westfalen)? Verdacht auf Spam: 10 Erfahrungen mit der Telefonnummer 023319754910 aus Hagen (Westfalen). Anruf von der (unbekannten) Rufnummer +49 2331 9754910 erhalten? Erfahrung (z.B. Verdacht auf Spam, Unseriös, Phishing-Anruf) mit anderen teilen.

"It's hard to say exactly when these AI obituaries first began appearing, but they've clearly exploded in the past year.

NewsGuard, a misinformation watchdog that tracks AI content, identified just 49 sites as "unreliable AI-generated news sites" with little human oversight when it started tracking them in May 2023. That number stands at 1,200 today.

"A lot of the sites are specific and focused solely on creating obituaries, whereas others are just basic content farms that publish a range of content," says McKenzie Sadeghi, NewsGuard's AI and Foreign Influence editor.

I found more than 20 websites publishing AI obituaries while researching this story, but I got the sense that the true number was much higher — and impossible to definitively capture. They seemed to come and go in rapid succession. One day I'd see one on a domain like deltademocrattimes.space; the next day it would redirect to a page of cascading popups that crashed my browser.

Joshua Braun, an associate professor at the University of Massachusetts Amherst who studies profit-driven hoaxes, tells me that the goal for spam sites isn't just to get eyes on ads — it's also to camouflage bot traffic that's used to drive up page views.

"When it comes to taking in ad revenue, drawing real visitors is part of the game, but a lot of it is also pumping in fake traffic," he says. "Drawing enough human visitors would throw off the detection mechanisms that might otherwise take note of all the automated traffic."

Sometimes, the people being memorialized aren't even real. Scheirer tells me he first became aware of AI obituaries a couple years ago when he began seeing classmates he didn't recognize on a page for alumni from his high school."

cnet.com/tech/services-and-sof

CNETDigital Grave-Robbing: How AI Is Plundering Online ObituariesThe rush to monetize grief leads to the creation of AI obituaries, turning personal loss into clickbait and exposing the dark side of online memorials.

Falls ihr auch #netcup-Kunden seit: Ich bin gerade auf eine #Spam-Mail reigefallen, die mich an eine unbezahlte Rechnung erinnern wollte. Ich hab’ da nur (allerdings blöderweise mit voller Signatur) darauf geantwortet, weil ja normalerweise das ganze per SEPA läuft.

Ich habe also keine Fake-Rechnung bezahlt - dafür sind meine Daten jetzt wohl oder übel in den Händen von Spam-Verbrechern.

Und es wäre mir nicht passiert, wäre die ECHTE Rechnung (also die tatsächlich, echte Rechnung) nicht auch heute Morgen schon gekommen.

Also: Passt aktuell auf, auf welche Mails ihr antwortet…

Derzeit macht dieser Post hier die Runde, ich habe diesen nun seit gestern mehrere Male gesehen. Das ist natürlich Fake, das sollte jedem klar sein. Der erste verifizierte Account, der dies verbreitete wurde wohl bereits gelöscht, aber es ist natürlich ein leichtes, neue Accounts anzulegen und dann mit diesem Schwachsinn weiterzumachen.

So wohl auch hier. Ich vermute mal, dass hier eine neue Spam-Welle auf uns zurollt, quasi "Nicole 2.0".

Auch wenn es selbstverständlich sein sollte: Bitte klickt NICHT auf diesen Link. Euer Account wurde NICHT gesperrt! Das ist ein Fake!

Meldet den Account und weitere, die sehr vermutlich folgen werden. Wenn ihr euch unsicher seid, ob euer Account gesperrt sein sollte, schreibt eure Admins unter der E-Mail-Adresse, die hoffentlich für solche Fälle hinterlegt wurde, an und fragt dort nach.

#Fediverse, #Phishing, #Scam, #Spam, #Fake