IDENTITY UNDER ATTACK · EPISODE 18

I Clicked It. Now What?

The email came from a real client about a real project. The sign-in page was not real. Sam had nineteen minutes of work ahead.

Identity Under Attack, episode 18: I Clicked It. Now What?. Fragment 18, the click.

Sam typed a password into the wrong page. What happened in the next nineteen minutes mattered far more than the click.

2:05 PM. Tuesday.

The email came from a client's real address, about a real project, with a document Sam was genuinely waiting for. The link opened a sign-in page for a file-sharing service. Sam typed their email, typed their password, and pressed enter.

An email from a client's address with the final copy for a launch page and a button to open the document, which led to a lookalike sign-in page.

The page reloaded and asked again. Then it showed an error. The address in the browser bar was not the service Sam used every day.

Three seconds. That was how long the bad feeling took to arrive. Sam's hands went cold. Then they remembered the pinned message, opened the team chat, and typed: I think I just put my password into a fake page.

The rest of this episode is for members. Membership is free.