They tried to hack me - watch out for this one!

[@BrianRouse]

First red flag I saw…”Please share us your rates. You will be getting a new product from private collection which you will keep.” Very poor grammar.

[@LironSegev]

I deal with companies from all over the world and you have to remember that English isn't everyone's first langugage and they are doing the best they can. So in this case, they left out the word "the". Not a red flag in my books.

[@WideCuriosity]

"Share us", wasn't ideal either. But yes, these days bad grammar is commonplace, except from established companies wishing to build and retain a decent reputation. However you both did, good, to spot it.

[@ferney2936]

and most glaringly: 'you are supposed to' rather than 'you can' or 'you should' I'm not a language policeman but this is my only way to recognise a suspect message so my antennae are at full stretch when I read an unsolicited email

[@billant2]

Come on, with an email title like "You have been selected blah blah blah" it should be an immediate click on Report Phishing without even opening it. I would never buy anything by any email or phone call solicitation, if I need something I go and find it myself, simple as that.

[@LironSegev]

@@billant2 fun fact: many KZbin sponsors have this as their title. What does your KZbin sponsor email say as their subject?

[@8thman8]

You're a genius -- I'm glad you are on our side!!

[@LironSegev]

haha - trying to help where I can

[@robh5695]

Thanks, Liron! Wow, those scumbags....

[@LironSegev]

I know, right?

[@SoundJudgment]

Liron.... to the Rescue once more!! Bravo!!! 👍

[@LironSegev]

Always! 😂

[@kevinoconnor6570]

Great video. I particularly enjoyed the demonstration of how you investigated this and what you were able to find.

[@privateunknown92]

Great share., the site was taken down. Truly remarkable

[@LironSegev]

Yup. Informed GoPro and it was taken care of 😉

[@StolenJoker84]

For me, the fact that the PDF is password locked is enough of a red flag. For those who don’t know, hackers password lock their files as an attempt to bypass scanning services (like VT), since those services can’t view the file properly until it’s unlocked.

[@CanuckDividends]

Thanks Liron. I am always watching your KZbin channel to keep on top of things.

[@garybarnes4169]

Just don't respond to unsolicited emails. End of.

[@Victic005]

Wow. Can't trust anything nowadays.

[@LironSegev]

true

[@supertuscans9512]

Will more of the anti-virus companies catch up with this?

[@LironSegev]

Yeah. They are already working with advanced AI detections

[@glinleyt]

Liron you legend. Thanks for the enthusiasm you bring to what could be a rather mundane topic!

[@John_Fugazzi]

I will have to watch this again to pick up the details. I was fascinated by the fact that you have a computer dedicated to check these kinds of things. Have you made a video about how you set it up? It seemed to have special software.

[@LironSegev]

actually working on something now - so watch this space....

[@MissPepperss]

Thank you for sharing this, you are an amazing kind person!

[@PSM5787]

Man I’m grateful you help us all out and show what’s going on

[@barrywood7741]

Ah, that $10.75pm was before the 20% off. That reduces it to $8.60pm, a massive saving of 11c pm. Is this a good deal?

[@ivofer8349]

Unreal.. so scary.. thank you for the advice

[@LironSegev]

No worries!

[@brucemckenna7035]

Terrific advice. Thank you Liron. Cheers from Australia.

[@louiethelooper440]

LIFESAVER!, retired (68) i would be completely lost in the PC world. Blessing, onward and upward.

[@dingokidneys]

Great video! Showing how people can do their own research safely is brilliant. I'd love to see more like this; demonstrations of things ordinary people can do to screen for phishing or other hacking attempts.

[@jimdandy8996]

The best thing you can do now is notify the Real GoPro company.

[@LironSegev]

first thing I did and got their website is taken offline

[@merlin5476]

If only i could remember all the info from all your vids when I'm helping my mum with her pc. Top work as always.

[@LironSegev]

haha yeah - its a lot going on

[@protoolsfanatic7276]

So basically, don't click on anything ever.

[@siyano]

protection against anything seem to stay the same 1) Dont click ANY link 2) Dont trust someone just because they seem "legit" 3) do a minimum of check before doing anything 4) if it legit they wouldnt go through so much hoops

[@madstarr2]

I wish I could give you 1K thumbs up! What an education!

[@LironSegev]

you rock! thanks for being here!

[@justjacqueline2004]

Just brilliant Liron.

[@LironSegev]

thanks for being here!

[@g04tn4d0]

A 5 second search let's you know there's no such person as Isabella Launder at GoPro. Literally 5 seconds. Poor grammer is another big tip off. But if they weren't so terrible at scamming, they'd use a GPT to fix it before sending the emails out.

[@LironSegev]

Afraid not. Brands use agencies. Literally get the same email from several agencies representing the company. So a search of who works at x company isn't going to cut it. Also not everyone who works at every company has social media (interns, temps, etc)

[@g04tn4d0]

@@LironSegevThe email you showed was signed by a Communications Manager at GoPro. That would be someone that I should be able to find. If it said "someone on behalf of GoPro" or they said they're working with GoPro, then I'd reach out to GoPro directly to investigate and verify... assuming I'd be that interested in the proposed opportunity.

[@g04tn4d0]

The email you showed was signed by a Communications Manager at GoPro. That would be someone that I should be able to find. If it said "someone on behalf of GoPro" or they said they're working with GoPro, then I'd reach out to GoPro directly to investigate and verify... assuming I'd be that interested in the proposed opportunity.

[@LironSegev]

@@g04tn4d0 so do you do this for every single email you receive? Just curious if you contact every single company to make sure that this person works for them. Genuinely interested

[@pete1996]

Absolutely brilliant content - thanks for the education - even if a little scary.

[@kcrobinson4210]

So glad your at the gate.

[@TheCraftyOrganizer]

WOW!!!! Great work!!!!!

[@LironSegev]

Thank you!

[@AlexTheFollowerofJesusChrist]

Awesome stuff, I appreciate channels like this. I now have trust issues with just about everything now in todays time and I had no idea how to scan or inspect files for malware etc. Thank you for your videos friend, you have a new subscriber. 👍

[@jameswatters9592]

Wow the level of sophistication is pretty staggering but they never counted on your level, well done

[@balsalmalberto8086]

It's simple social engineering to get a person to download this and execute a random program. the complete ignorance on what random executables can do is staggering. It's pure amusement to send this to a security researcher.

[@Geno2733]

Jim Browning fell for something like this, only no file was involved in the scheme. Also, the form at 3:39 is more commonplace than you realize. I think sites do this to prevent mailboxes from getting spammed.

[@bionborys1648]

Thank you for walking us through the malware analysis process, you put 10 min into it. Very informative to say the least.

[@woritsez]

nice catch. skepticism wins

[@AnimaJumper]

The only reason it's password protected is because scanners can't check the contents. That's why the scan of the url showed 0 detections.

[@JasonWestaway]

Hey Liron, what an amazing yet scary video. I learned something from this: to extract the link from "inspect" I do know about Virus Total. Super happy you did that! Thanks be safe out in the online world. Till next time.

[@LironSegev]

great - I don't download anything unless I absolutly have to, so this is a "first line of defence" type of thing for me. But as you saw, it passed the first test - that is because it is password protected and that is 100% a red flag!

[@JasonWestaway]

@@LironSegev Yes fully get you! Thanks!

[@lenward474]

Great find...did you contact GoPro???

[@LironSegev]

absolutly - website is no longer live 😉

[@lenward474]

@@LironSegev 10 scam points for liron!!!!

[@Humaneriiing]

This (now-defunct) email (where you get notified) has a theoretically specific function built-in; if you had clicked a link with this, it (silently) grabs your IP/MAC address, indirectly contributing to gaining access to your cookies, such as your token.

[@deanmouscher2495]

OMG wow, the sophisitication of this just blows me away!!! Well thank you Liron for educating me - now I know that even if it looks TOTALLY legit - it might not be.

[@Adam-Mei]

It's nice to have anti hackers.

[@oldschoolel]

Thanks, Liron, always for quality content.

[@LironSegev]

My pleasure!

[@ritajain2453]

KaChing! As usual, you hit the nail on its head. (please ignore grammatical errors) 😍😍

[@LironSegev]

Thank you! 😃

[@ritajain2453]

​@@LironSegevI still remember the good old days when Lynx was the only available browser and there were no viruses until the Sabri Brothers of Pakistan unleashed the "Brain" virus. I still have that gargantuan Schugart 10MB HDD 😂

[@MichaelAmen316]

Wow... crazy. Thanks Li ron.

[@MelvenMathias]

Thank you for keeping us informed and teaching us how to protect out systems. I have learned a great deal from you and your videos.

[@MrJwyne]

Very informative video. Thank you!

[@kystars]

Thank you as always for your great knowledge!

[@boulderbash19700209]

I don't get it. Does the pdf steal your data when openned? Or is you data stolen when you upload the filled in form?

[@LironSegev]

when you open the pdft because its not a pdf

[@pvdhaar]

@@LironSegevI still don't get it. Opening the pdf will start Adobe Reader or some other pdf reader, which will abort due to unknown file format. Or?

[@stewartpalmer2456]

Even when the dynamite has a long fuse, yes you wait for it but, still the dynamite goes, "Boom!" Great lesson. This is one way the older generation gets in trouble. Stop clicking on things.

[@paranoidcom1146]

Very informative for average users.

[@MarkLawsonY3K]

Bravo.... you are, to me, a great story teller and teacher... As a parent, do you think we can teach creativity and curiosity? Or, how did you become so curious? Lawson

[@brownlife03]

If I get emails like that, the thing what I do is trace their IP address basically from the email and after that, I always scare them by saying I know where you live. If you send me any more of this, I’m a go a little visit where you live at.😮🎱🔮

[@mymail8503]

Thanks for the important information.

[@darkfalcon59]

I always like your videos man super educational thanks for this.

[@alleninch4912]

Well done, I might have still fallen for this one.

[@kariembegg6156]

Love your work...proudly South African!

[@LironSegev]

Thank you! 😊

[@einyv]

Liron, my router shows my tablet tried to connect to some website where it says blocked access but I am able to figure out where the heck it came from. I never heard of it, router shows malicious, malware scanners show nothing, I am at a loss. It must be trying to connect in the background but I can't figure it out.

[@Juicypopin]

whats the different between delete me and incogni? dont thay do the same work?

[@HopefulEmpath]

Thanks for the heads up!

[@LironSegev]

Any time!

[@TheTransporter007]

This is why I daily drive Linux, and ONLY use Windows for Blackmagic DaVinci Resolve (the linux version leaves some things to be desired).

[@balsalmalberto8086]

Somebody made a video about installing Davinci on any linux but running inside Distrobox. may work.

[@ThatLeeNoble]

The hidden WHOIS is common with domains registered in the EU because of GDPR laws.

[@SynK-R]

Thank you Liron. Another hack to watch and look out for. 👍

[@lerssilarsson6414]

"Only the paranoid survive" -- Andy Grove

[@smallqwaro]

Password protected zip files = red flag

[@loneranger5928]

Liron 👌 great video.👍

[@massapower]

Amazing Video & work you put into this.. 😜👍🏻

[@LironSegev]

Thank you so much 😁

[@quake2u]

Thanks , Keep up the good work because I'm sure things will get much worse in out AI future.

[@LironSegev]

oh 100% - we are only just starting with AI and its already a nightmare from a security point of view

[@luisv7117]

Liron you are the best again thank you I will be watching all your videos

[@LironSegev]

Appreciate you 🔥

[@Commandosupersonic]

So after watching quite a few of your videos and liking them and learning from you. I was beginning to believe. So I took your word for it and went for the delete me. Paid for my membership. Put my information in. I don't know what happened after that. All I know is I think they want me to do the work contact wherever my information is and request that it be deleted. Don't know what to do I just paid all that money. I don't know if I can even get started I thought that's what they did was delete it could someone explain to me

[@LironSegev]

You don't have to do anything. Just complete your profile and they will get working. They do all the work. You can send them links if you find your info on the web but I just wait for their report. Also contact them if you have questions or concerns

[@Commandosupersonic]

@@LironSegev okay I've tried to contact them apparently I'm doing something wrong or something's wrong but anyways I keep clicking on trying to finish my information but it just goes to a blank page I filled out the information on the sheet several times and they keep asking me to go back by sending me a male. Plus they're sending me emails to finish my account. When I tap on where I'm finished and it does nothing so like I said I don't know what I'm doing. Butler web pages and responding proper as I fill out the information and tap next it does nothing

[@JAS-s8u]

It's utterly amazing how often your hammers find a nail.

[@kb8570]

Awesome video. Thank you.

[@johnphillips519]

Have you notified GoPro and KZbin about this?

[@LironSegev]

Of course. Got the website taken down

[@johnphillips519]

Great work👍@@LironSegev

[@Flytrap]

Did you notify GoPro about this? They might have something to say about it.

[@LironSegev]

of course - the website is no longer live

[@breadmoth6443]

sadly that domain / site is still active, has everyone bothered to even report it ?

[@LironSegev]

That website was taken down. I reported it to GoPro.

[@HeyPat-px4ee]

I think it's hysterical that they chose a fictional character that becomes a nun as their name. ref: "Roses in the Tempest" by Jeri Westerson

[@LironSegev]

😂 AI give me a good name 🤦

[@ThatWorks]

Yup same old basic tactic that got me

[@dank9296]

Great info. Thank You!!👍

[@danvasii9884]

BEst instructor anti-scam, IT & computers!

[@outdoorstudios2022]

Thanks for sharing!

[@LironSegev]

Thanks for watching!

[@superadmin01]

Why not use sandboxie?

[@sorinscodecamp]

Another great video!

[@LironSegev]

Thanks again!

[@pepeshopping]

You are NOT very observing eh!? The first email was almost perfect, but the second one, I can TELL it was written by a well educated Indian!

[@LironSegev]

Oh look another expert. How many emails from brands do you get on a daily basis? Oh and fun fact, the entire planet doesn't speak English as a first language. I know it's hard to believe, but it's true. But please do share your entitlement 🤦

[@donnytestado21]

There is no Available For Phillipines this "Delete Me" for me to subscribe?

[@mywwwow]

Ufffffff🤬 Thank you a lot 💐

[@luisv7117]

Great videos thanks you so much for sharing your widsom

[@m4ssganja_gamer691]

PDF with a password big red flag LUL

[@LironSegev]

100%

[@lilmsgs]

Why didn't you use a virtual machine?

[@GTSongwriter]

The unlocker file is a batch file?

[@denisgheys2165]

Thanks for the video. 😊

[@LironSegev]

You're welcome 😊

[@timbacchus]

Thanks so much for reminding me about who.is. I had forgot about it. A big thanks for all you do for us.

[@richd6362]

Very helpful video.

[@LironSegev]

Glad to hear that

[@Techsmartshorts]

you are really very informative

[@LironSegev]

appreciate you being here!

[@lastdance2006]

Liron, thank you for this.

[@LironSegev]

Thanks for being here

[@Bill_the_Terrible]

Greetings from South Africa! Thanks for the info. Love your channel. I am inundated with spam emails regarding package delivery waiting to be cleared, when I have not ordered anything. Just non-stop! These b@stards know no ends.

[@LironSegev]

Hey or howzit. Ja it doesn't stop. And even if you block their numbers or emails it keeps coming from different ones

[@naidesilva755]

Thank you!

[@LironSegev]

You're welcome!

[@gotbordercollies]

Thank you Thank you Thank you

[@QuantumTechTraveler]

This method hacked many other KZbin channels luring people with GoPro ads

[@MaxPower-11]

What kind of file is the “unlock presentation” file?

[@embeddedtom]

You should report their website to GoPro.

[@LironSegev]

First thing I did. Their website got taken down 😉

[@wendysmith1453]

thanks for this important info

[@LironSegev]

You're welcome

[@garylanders1470]

Wowza!