this post was submitted on 23 Apr 2026
359 points (99.7% liked)

Not The Onion

22894 readers
668 users here now

Welcome

We're not The Onion! Not affiliated with them in any way! Not operated by them in any way! All the news here is real!

The Rules

Posts must be:

  1. Links to news stories from...
  2. ...credible sources, with...
  3. ...their original headlines, that...
  4. ...would make people who see the headline think, “That has got to be a story from The Onion, America’s Finest News Source.”

Please also avoid duplicates.

Comments and post content must abide by the server rules for Lemmy.world and generally abstain from trollish, bigoted, ableist, or otherwise disruptive behavior that makes this community less fun for everyone.

And that’s basically it!

founded 3 years ago
MODERATORS
 

Ship attacked by Iran after possibly falling for safe passage crypto scam.

all 25 comments
sorted by: hot top controversial new old
[–] pastermil@sh.itjust.works 98 points 6 months ago (1 children)

Fuck, this really read like a satire piece.

[–] diabetic_porcupine@lemmy.world 24 points 6 months ago

Honestly I did a double take when I saw the community name like oh it’s just an onion…. OH FUCK THATS NOT AN ONION!?

[–] daannii@lemmy.world 32 points 6 months ago
[–] quick_snail@feddit.nl 13 points 6 months ago

Social engineering works.

[–] BeMoreCareful@lemmy.world 12 points 6 months ago

I swear I was just thinking this the other day when there was all that confusion and some ran for it and got caught.

Like how do you know you're bringing the right people.

Fortunately, then just kind of turned them back.

Also, shocking how many sailors were apparently in those ports and working. I heard 20,000 as that number.

[–] quick_snail@feddit.nl 11 points 6 months ago (1 children)

I don't understand why y'all are surprised.

This is a targeted social engineering campaign. Did you not get training by your company's security team on what well engineered, targeted social engineering attacks like this look like?

Always verify the authenticity of your comms. And certainly verify the address to which you're sending (be it swift wire, IBAN, or a crypto public key) before sending a dime!

[–] mech@feddit.org 19 points 6 months ago* (last edited 6 months ago) (1 children)

Our Head of Accounting got an e-mail to his private mail address with just a link to a Word document on some random OneDrive.
It contained an invoice over $4000 for "AI services", payable via money transfer.

He sent it to the accounting department and told them to pay it.
Luckily, one of the accountants actually had a brain, and she forwarded it to IT.

[–] quick_snail@feddit.nl 10 points 6 months ago* (last edited 6 months ago) (2 children)

God. I hope they got a very stern lecture from their superiors and mandatory retraining from their security team.

Also their laptop should be wiped and rebuilt from opening a word document from "some random OneDrive"

[–] mech@feddit.org 9 points 6 months ago* (last edited 6 months ago) (2 children)

Everyone gets yearly mandatory training. And every time you open Outlook, you get a reminder to stay vigilant, with a fun cartoon from the graphics department that changes daily to keep peoples' attention.

Last year someone in the upper half of the food chain fell for a phishing mail. We nuked his account and recreated it with "p.lastname" instead of the usual scheme "peter.lastname" .
He had to inform all his contacts about his new e-mail address, and his coworkers called him pee-dot behind his back for a while.
After that, people got a lot more careful, it was better than any training.

But somehow, it's usually upper management that'll call the IT lead and demand to unblock a website RIGHT NOW because they need it, and when you check it out, it's a phishing link.

[–] quick_snail@feddit.nl 6 points 6 months ago

Time to fire upper management

[–] captainlezbian@lemmy.world 4 points 6 months ago

Well yeah, those with power have the power to not listen to the skilled people below them

[–] foggy@lemmy.world 5 points 6 months ago

As an IT professional, I would genuinely suggest blocking this individual from sending or receiving email from any non-business email domains.

No gmail, no yahoo, no zoho, no outlook, no protonmail, etc.

[–] webp@mander.xyz 5 points 6 months ago
[–] PalmTreeIsBestTree@lemmy.world 2 points 6 months ago* (last edited 6 months ago)

Guarantee it also involves the gambling betting sites on random events

[–] Bloomcole@lemmy.world 0 points 6 months ago

There is video of the Iranians warning the US invaders to turn back.
These idiots probably didn't listen when they got told the same thing.