phishing cybersecurity sms-scams digital-safety

Thanks FedEx, This Is Why We Keep Getting Phished (2024)

troyhunt.com

August 4, 2026

8 min read

🔥🔥🔥🔥🔥

63/100

Summary

Recent phishing attacks often impersonate parcel delivery services, such as FedEx, using messages that create urgency and fear of missing out. Users can avoid falling for these scams by identifying warning signs, including unusual URLs and the overall tone of the messages.

Key Takeaways

Phishing attacks disguised as parcel delivery notifications are prevalent and often bypass technical controls, landing directly in users' SMS inboxes.
Common signs of phishing messages include urgency, typos, unusual URLs, and suspicious formatting, which can lead to a high level of skepticism among recipients.
Users are advised to verify requests by visiting the official website of the service in question rather than clicking on links in suspicious messages.
URL parameter tampering can allow users to manipulate tracking information on phishing sites, highlighting vulnerabilities in the design of payment services.

Read original article

View story →

Coverage & discussions

Hacker News · troyhunt.com

Thanks FedEx, This Is Why We Keep Getting Phished (2024) ↗

Community discussions

Hacker News discussion ↗

Historical count: 5 · 5 saved in sample · Historical sample

Analysis ready

Community Sentiment

Mixed

Positives

Mandatory identity verification for SIM cards in Australia could deter scammers, showing that regulations can effectively reduce phishing attempts.
The recent blocking of 336M scam SMSs in Australia demonstrates proactive measures yielding significant results against phishing efforts.

Concerns

The multitude of new gTLDs is a nightmare for non-tech users, making it too easy for them to fall for phishing traps.
Businesses using link shorteners and odd domains only muddy the waters, leaving users confused about what's legit and what's a scam.
Phishing training at work ironically leads to confusion, with employees mistaking legitimate emails for phishing attempts due to poor practices.