Skip to content

Phishing campaign targeting organizer email addresses #1269

Description

@jeffkeller87

I received the following email impersonating Hi.Events and directing recipients to a fake Know Your Customer page via link shortener, indicating that my Hi.Events account has been temporarily disabled and requires verification via payment.

All of the links in the header and footer of the KYC page are either missing or link back to the same page, so it is clearly fake.

Upon closer inspection of the phishing email, it appears that someone is abusing the organizer contact form on Hi.Events, effectively using the platform against its own users. I have search engine indexing disabled, so I'm not sure how my page specifically was discovered, so this likely impacts publicly listed events more.

The Phishing Email
Image

The Fake KYC Page
Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions