StartHaven

We help you trust what you click!
Teaching you to spot phishing. One meme at a time.

[StartHaven @StartHaven]

You can't be COO unless you can make the fluffiest egg on earth #offsite

[StartHaven @StartHaven]

scam email: we've noticed unusual activity
me: same honestly

[StartHaven @StartHaven]

scammer: sends perfectly crafted phishing email
me: hovers over link
URL: https://t.co/jDoHos9nPG
me: 😐

[StartHaven @StartHaven]

finding out scammers can send from [email protected] and having to completely rewire 20 years of internet instincts in real time

[StartHaven @StartHaven]

full story here: https://t.co/8jcQHj7wfz

[StartHaven @StartHaven]

🚨 Someone impersonated our CEO to get finance to pay a fake invoice.

The tell? 👀 the reply-to. 'From' showed our domain, but the reply-to went to an outside inbox.

Two seconds on the reply-to, or a wire you'll never get back. check out the full story below 👇

[StartHaven @StartHaven]

Unsubscribing from sketchy emails is the digital equivalent of answering the door when you shouldn't have

[StartHaven @StartHaven]

New Haven merch coming...

Like if you'd want one.

Stay protected no matter WHAT!

[StartHaven @StartHaven]

"unauthorized sign-in attempt flagged, your account may be at risk, respond before your account is locked, secure your account at https://t.co/f5R46FTh9w"

That's not a subject line that's a hostage note

[Jameson Lopp @lopp]

New phishing tactic: attackers are abusing Google's no-reply addresses to send messages to victims that are from Google infrastructure. They can't control the autoresponse email body, so they put their message in the subject line.

[StartHaven @StartHaven]

Rating ways people find out about phishing:
Clicking a test email at work: 0/10 embarrassing
Your IT friend warning you: 7/10 appreciated
Finding out the hard way: -100/10 do not recommend
Haven: 10/10 no drama

[StartHaven @StartHaven]

Friends don't let friends have unprotected browsing.🤡 Use Haven!

[StartHaven @StartHaven]

Unpopular idea: phishing emails are just cold outreach that works and honestly the marketing industry should be humbled

[StartHaven @StartHaven]

We are unreasonably suspicious of links and we think you should be too

[StartHaven @StartHaven]

We teach kids stranger danger but not link danger and that feels like a curriculum gap

[StartHaven @StartHaven]

A domain name costs $12 and that's all that stands between you and a perfect fake version of your bank's website

[StartHaven @StartHaven]

There are two kinds of people:
1. People who hover over links before clicking
2. And people who are about to learn a very expensive lesson

[StartHaven @StartHaven]

🚨https does not mean safe. it means encrypted. those are not the same thing and someone needs to say it louder.

[StartHaven @StartHaven]

Shoutout to every phishing URL that has like 47 subdomains before the actual sketchy part that you have to scroll to see

[StartHaven @StartHaven]

@sflorimm Marketing (it may or may not be the marketing person replying to this thread)

[StartHaven @StartHaven]

@markproduct You got phished
https://t.co/t75IhUloyI