← All talks

Phishing Scam Alert: Identity Token Stolen! #shorts

BSides Frankfurt0:25927 viewsPublished 2026-04Watch on YouTube ↗
About this talk
Beware of fake login links! Attackers mimic legitimate sites (e.g., Login-elastic.co) to steal identity tokens. One click can compromise your access. #Phishing #CyberSecurity #DataBreach #InfoSec #Tech
Show transcript [en]

They got a link that just said, "Hey, your your login's about to expire." And it said login-elastic.co instead of log instead of log elastic.co. It looked almost the same. They click on it, it come brings up our corporate website. They log in, everything looks cool, and then they get logged in and it says, "Thanks for refreshing your token." And then they close and go about their day. Meanwhile, the attackers have it. Now, they have an identity token.