I consider myself a pretty big computer nerd, and I fell for some Phishing recently... I think.
As a dabbler in several web services I had a Blockbuster Online (BBO) account for a while. One way or another I decided it didn't fit my needs so I canceled it and started up with Netflix again. Well low* and behold I get this e-mail that says something along the lines of "Sign back
up with Blockbuster Online and we'll send you $25 to your PayPal account!" I'm 90% sure Blockbuster has actually run promotions like this before, so I didn't think much of it. I was on the fence as to whether I wanted to sign up again so I kept the message.
Well, somehow I remembered the expiration date of the promotion. On the last day I decided to give it a shot. I opened up the e-mail and clicked on the link. I've had Thunderbird warn me of "suspicious" web links, but I'm not sure if that feature was implemented in the version I was using. One way or another, no "hey dummy, this isn't the address you think it is" message popped up. I proceeded to enter my username and password (actually KeePass did) and I clicked the "sign me back up" button.
About 3 minutes later I realized that I didn't actually check the link. When I did
check it, I noticed it went to some strange URL (I don't remember what it was). I immediately changed my PayPal password (KeePass' password generator is great) and my BBO password. Then I sent a message to BBO inquiring as to whether it was a legitimate promotion or not, to which I received a canned, unhelpful response.
Anyway, sorry to go off topic... I just figured that I'd try to ease the shame
of being phished a little. Show your friend all my nerdy posts if you want
Thanks to the non-helpful BBO e-mail response I'm not even sure it wasn't a real promotion. I did some searching and all I could find was a person from around a year earlier with a similar e-mail, that linked to the exact same domain, that was also wondering
about the legitimacy of the whole thing. I was using Firefox at the time, I was pretty disappointed the big, red warning didn't pop up alerting me I was about to do something stupid.
*I have a feeling that's not the correct spelling of "low"