Hacker News Reader

Comment by azgolfer05 | Hacker News Reader

I received this text just now, is this a scam??

Nope, T-Mobile did get hacked: https://www.t-mobile.com/brand/customer-information-2023, https://www.cnn.com/2023/01/19/tech/tmobile-hack/index.html

However, the link was NOT the correct one, it's like that time when Equifax got hacked and asked users to go to https://securityequifax2017.com/ (which looked like this: https://web.archive.org/web/20170908172914/https://securitye...) instead of the genuine https://equifaxsecurity2017.com/.

It’s an accident. Who owns that “metro-tmo.co” doesn’t seem to have realized this mistake quite yet? no doubt is getting tons of clicks to their parked adspam site. I can picture this being resolved by buying out or seizing-via-legal-injunction the metro-tmo.co domain under trademark law. may be too late to “unsend” the texts.

the website does not resolve for me, but if it has adspam, serving targeted text add (contextual) can be a big money maker for a clever marketer

It could also be changed to a copy of the official T-Mobile site, resulting in widespread phishing.

An “accident” that permits them to seize someone’s assets does not sound like an accident to me.

Really as in as the time of comment- You were still sent the errant http://metro-tmo.co approx 2 hours ago? I called in and filed a security incident ticket like 10 hours ago. They said no ticket filing would be to be necessary, as they were aware of the issue. So it’s a mystery to my me how you’d be getting that Mis-spelled link still over 8 hours after I reported it.

I just received a text with the exact message saying to click the “ http://metro-tmo.com/CustInfo” website. I reported it as junk text on my phone but itd be nice to see these people get shut down.

I did so as well, so I’m wondering if it’s a scam.

You received it 2 hours ago? That’s nice. I called my at Metro T-Mobile Corporate district managers (but actually they were actually just fired The other day, DDMs and even the higher level Zone Managers too-this is public knowledge and news can be found on Google) - so they were of no help) attempted to file a formal security incident ticket through our normal escalation horline regarding is issue 10 hours ago and was told they were already aware.

Can you post a screenshot of the text?

i think so, otherwise some shit would've happened.

Reply on news.ycombinator.com