The scariest “user support” email I’ve ever received

A developer shares a real phishing attack disguised as a user support email. The attacker claimed cookie consent issues prevented site access, then sent a fake Google Sites link with a CAPTCHA that copied a malicious base64-encoded command to the clipboard. The command would download and execute a remote shell script if run in a terminal. The incident highlights how AI-powered phishing attacks are becoming more sophisticated and natural-sounding, making them harder to detect.