526
Thanks FedEx, This is Why we Keep Getting Phished
(www.troyhunt.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 20 Sep 2026
526 points (98.3% liked)
Technology
88199 readers
4682 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
So many legitimate messages look like phishing schemes nowadays: those class-action ones are probably the worst offenders for me because it would take no effort for someone to create a scam based on that. Banks are another big one. These companies are making it really easy for the scammers to take advantage of people.
Interestingly enough, I've found LLMs are pretty good (for now at least) in helping determine if something is legit or not. I'm using them as a glorified search engine in such a case, but having them not only opine as to whether or not it's legit but link me to some sort of news or other official site about the thing helps.
edit: lulz, the anti-AI sentiment is so high that people downvote even the places where it's actually useful. Whatever, bros, make yourself happy. I hate AI in general, but I don't let that blind me to the few places it's actually useful. lol
So, your suggestion is to feed private, potentially sensitive information to an LLM and then trust its judgment?
I'm sure that a bank / delivery company / doctor's office that uses such terrible practices is actually on the ball when it comes to making sure all the links they send only work once and time out after a while, right? So, when a guy in Nigeria is working at his job where he reviews LLM sessions to ensure they're sycophantic enough, there's no issue. He can't click on it or sell the data to criminals or anything, can he?
I'm really not sure that I'm giving them anything they don't already have, but i was speaking of incoming potential spam. Like notifications about class action lawsuits. Generally speaking, if a spammer knows something about me, that means it's already out there. And if they know enough about me, it's probably an email I can identify as not spam because they know things that spammers wouldn't know............ so I don't think I'm really pasting in any truly sensitive information in the first place, but I've tried to address the point anyway.
If it's not spam, you're telling the chatbot that you were one of the people whose penile implant malfunctioned and are part of the class action lawsuit about that. That means you're telling the Nigerian chatbot quality control expert about that.