Comment

Comment by quectophoton

Then you have companies like AWS, they were sending invoices from `[email protected]` but last month they changed it to `[email protected]`.

That looks like a phishing attempt from someone using a random EC2 instance or something, but apparently it's legit. I think. Even the "heads-up" email they sent beforehand looked like phishing, so I was waiting for the actual invoice to see if they really started using that address, but even now I'm not opening these attached PDFs.

These companies tell customers to be suspicious of phishing attempts, and then they pull these stunts.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton