Cloudflare's Legit Wallet Looks So Phishy That Even Experts Get Fooled
Security Is Hard, Y'all
A security expert nearly fell for a phishing scam—until discovering the suspicious site was actually Cloudflare's new Wallet product. The episode reveals how legitimate services can mimic attack patterns, making it brutally hard for users and reputation services to tell real from fake. The author urges developers to follow best practices and users to stay vigilant.
When legitimate websites sometimes act very very phishy, consider how hard it must be for URL Reputation services like Microsoft SmartScreen and Google SafeBrowsing to block malicious sites without false positives as millions of new sites are added to the web every week.