Troy Hunt gets phished, tells the story

This morning I read an article from today’s Malwarebytes newsletter. While some of the stories are items we’ve covered in detail including the 23andMe and the new threat people will possibly be facing with the new banking trojan, I’ve decided to talk about the fact that story telling is what we need to cover today.

In an article titled Security expert Troy Hunt hit by phishing attack we learn the story on how about 16,000 subscribers of Troy’s were pilfered.

The email, he says, looked very real, and he’s good at spotting them. But on this day specified, he was tired, and fell for it. He probably didn’t look at the URL either, and that is understandable if you’re tired.

Some of those 16K were unsubs, so he needs to work with the provider of the mailing list software used to have that bug fixed, but now he has added himself to HIBP and that is what he should do.

This is unfortunately what he needed to do, and he’s right to do so.

Have you read this story and what do you think? Did he do it correctly?