Not that sophisticated, they assembled a temp email from your real one to
some random system, and just hope you'll log in with creds to capture.

They probably just harvested your email from one of the many leaks that
occur every other day.

I bought some yubikeys to play with, but so far the biggest problem is me
having the stupid thing around enough to unlock things when needed that I
haven't turned it on fully yet.  I bought two as I worry about some
redundancy if one gets lost/destroyed, need to look into that some too...

-mb

On Tue, Aug 28, 2018 at 4:40 PM, Mark Phillips <mark@phillipsmarketing.biz>
wrote:

> The consensus is still that it is a rather sophisticated scam?
>
> Thanks!
>
> Mark
>
> PS I use 2 factor Google authentication with all my accounts.
>
> On Tue, Aug 28, 2018 at 1:07 PM, Stephen Partington <cryptworks@gmail.com>
> wrote:
>
>> Yubi key. Lastpass authenticatior Google authentication. Two factor
>> authentication is almost a must have now.
>>
>> On Mon, Aug 27, 2018, 9:32 PM Ed <plug@0x1b.com> wrote:
>>
>>> That is Phishing
>>> Mark, look into Yubikey as a 2nd factor.[1] it's a two step process,
>>> add your phone to set up second factor and then add Yubikey token as
>>> the preferred 2nd factor. If you use a phone to check on your Google
>>> account, add the Google Authentication as an alternative. (and print
>>> out a sheet of secret keys just for emergencies)
>>> [1]  https://support.yubico.com/support/solutions/articles/150000
>>> 06418-using-your-yubikey-with-google
>>> On Mon, Aug 27, 2018 at 3:17 PM Mark Phillips
>>> <mark@phillipsmarketing.biz> wrote:
>>> >
>>> > I keep getting alerts from Google along the lines of
>>> >
>>> > Sign-in attempt was blocked
>>> > mark%phillipsoasis.com@gtempaccount.com
>>> >
>>> > With a button to "Check Activity". The button takes me to a Google
>>> sign in page for mark%phillipsoasis.com@gtempaccounts.com asking for my
>>> password. I don't use this address. I do own the domain
>>> phillipsoasis.com and have an email address mark@phillipsoasis.com
>>> >
>>> > Is this a scam/spoof or something real?
>>> >
>>> > Thanks!
>>> >
>>> > Mark
>>> > ---------------------------------------------------
>>> > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
>>> > To subscribe, unsubscribe, or to change your mail settings:
>>> > http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>>> ---------------------------------------------------
>>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
>>> To subscribe, unsubscribe, or to change your mail settings:
>>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>>
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>