TLDR: my bank sent out emails with websites which looked a lot like phishing mails, so much so that this similarity could potentially be used against them legally by potential phishing victims
– Discussion at hackernews (soon)
Chapter 1: You’ve got mail As I was writing my first post some weeks ago, I got an email from my bank in my inbox:
They can’t even be arsed to move away from SMS for MFA.