Comment on The Man Who Hacks Your EmployeesparentComments−mentat11yIt's possible to check passwords in real time against the site.−pavel_lishin11yWhat do you mean?−morgante11yIf they ask for your password, an attacker can simply try to log in with it and then if it fails say "looks like that's not correct, could you try again Mr. Smith?"−pavel_lishin11yIf an alleged customer service rep straight-up asked me for my account password, I would 100% assume that I was being phished.
Comments
It's possible to check passwords in real time against the site.
What do you mean?
If they ask for your password, an attacker can simply try to log in with it and then if it fails say "looks like that's not correct, could you try again Mr. Smith?"
If an alleged customer service rep straight-up asked me for my account password, I would 100% assume that I was being phished.