This will be a quick post. We have received a phishing mail to our [email protected] mail address telling that they are “lemmy.world Security Team”, telling that they will “disconnect” your account from our instance. This is ofc, not us. Do not fall for it! The attached image is how the mail looks like.

~Lemmy World Team.

  • MicrowaveOvens@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    1 year ago

    Hey, quick question. I’m assuming these emails are automated, so how do they know your account’s email? Is this part of a leak or are they sending email via “send notification to email” option in lemmy?

    • jarfil@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      1 year ago

      There are some commonly used emails by most domain owners, like: info, webmaster, security, reports, sales, etc. Some people also set their email with a catch-all address, so if someone sends an email to “cat.in.tights”, they’ll get it too.

      • MicrowaveOvens@lemmy.world
        link
        fedilink
        arrow-up
        1
        arrow-down
        2
        ·
        1 year ago

        Ah. so that “[email protected]” is an email and this is not related to fediverse. Jus checked, there’s no such account here. No point in making an announcement about it here if its not related to fediverse and only gets sent to domain owners, imho. lol