Search Unity

  1. Megacity Metro Demo now available. Download now.
    Dismiss Notice
  2. Unity support for visionOS is now available. Learn more in our blog post.
    Dismiss Notice

How Unity is setting us up to be phished ... or maybe I was phished

Discussion in 'General Discussion' started by JohnnyA, Mar 12, 2020.

  1. JohnnyA

    JohnnyA

    Joined:
    Apr 9, 2010
    Posts:
    5,041
    My Reply:

     
    tigerleapgorge likes this.
  2. JohnnyA

    JohnnyA

    Joined:
    Apr 9, 2010
    Posts:
    5,041
    For context the email contains links to a tracking site (appspot.com) rather than to Unity itself. I didn't post the links in case this actually is a phishing atttempt.
     
  3. Vectorbox

    Vectorbox

    Joined:
    Jan 27, 2014
    Posts:
    232
    The 'appspot(dot)com' domain has been flagged as spam on Microsoft Answers.

    The registrar is MarkMonitor Inc which uses Google name servers. Probably worth submitting an abuse report... whois
     
    Last edited: Mar 12, 2020
  4. JohnnyA

    JohnnyA

    Joined:
    Apr 9, 2010
    Posts:
    5,041
    Definitely looks dodgy, although Unity sales requests are always so dodgy it is difficult to tell.
     
  5. JohnnyA

    JohnnyA

    Joined:
    Apr 9, 2010
    Posts:
    5,041
    The follow up email seems to suggest this is real:

    (I will double check with support@unity3d.com)
     
    infinitypbr likes this.
  6. AndrewAssetStore

    AndrewAssetStore

    Unity Technologies

    Joined:
    May 2, 2017
    Posts:
    2,612
    This is a legit email. Thanks all!
     
    Joe-Censored likes this.
  7. angrypenguin

    angrypenguin

    Joined:
    Dec 29, 2011
    Posts:
    15,614
    I've more than once now seen Unity staff make statements like this, which is also a security issue.

    Now, any spammer can come and copy the email contents posted above, stick it in their spam mails, and if anyone Googles it they'll find staff saying it's legit.

    You should really be telling people how they can check if it's legit. For example, if it is digitally signed then what signature should they check for?.
     
    BrianFury likes this.