You are not "three apples tall" bitch you are an evil ghoul and you are tall as fuck

MediumUkkomon DiM sprite!! (i tried my best!)

POSSIBLE PHISHING SCAM

Hey all, I just got this in my inbox after I posted an artwork on my other blog. Looking through their blog they seem to attach this scam at artists so I’m posting this here since here I have better engagement.

If the misspelling of ‘tumblr’ and ‘technical’ wasn’t an immediate giveaway, don’t fall for it. Stay vigilant for these things since it seems there are multiple of these around. Report and block and let tumblr know about this.

whoops I accidentally double reblogged but:

hi, i did some research on this but this link was not phishing and here's why:

qualtrics is a legit website that companies pay to host data gathering surveys to collect metrics on various things. you can also create free surveys but from what i understand the survey results aren't as in-depth as the paid versions get you.

it looks like the survey originates from a banner on the discord app and you click on it and it takes you to the site and you do the thing there. it was only rolled out to a certain amount of people (for the purposes to maybe only get people they thought would be pro-AI? who knows with Discord) but was then passed around everywhere because Fuck AI. And then Discord realized that things weren't going the way they wanted and pulled the survery.

I did some further research on the URL itself:

From ESET link checker it rates it as safe, I also plugged it into a few others as well like Fortinet and Bitdefender and both of those came back safe too, here's a screenshot of ESET:

info on the link itself from urlvoid:

the actual qualtrics site info from urlvoid as well to compare the age of the domain (usually phishing domains are very very young and/or brand new and not legitimate domains but these are both legitimate domains.)

and, inb4 people say "phishing attempts don't always have to ask you to enter your login credentials to scrape your info"

no keyloggers or malware after I clicked on the link (it's been 8 hours now and my discord account is fine).

hopefully, this will quell some panic about the discord thing, its always good practice to protect your account with MFA when it's offered and to change your password when you suspect something may not be right, it's better to err on the side of caution etc, but in this case, it's alright and there's no need to create any undue panic about a link to a survey. fuck AI and Discord should know better than to try and pull more wool over its userbases' eyes because did they not learn from the NFT thing?

okey dokey bye bye now

Hi, this is 100% a phishing scam. You can tell because the domain link, but let's do some basic thinking on this.

Question 1: Why would discord use this when they already have the ability to do surveys through discord itself?

In the past, when Discord wanted to do surveys, they did something like this:

Because they run their own platform. If they want to do surveys, they'll send them to you via their own service, which they can already do.

Question 2: Is that original image legitimate?

No, it's not!

That's the original one, from a previous survey they did a year ago. You'll note that they copied the image and then changed the text in photoshop.

Note for the wise: companies that are trying to become publicly traded, like Discord is trying to, are not going to use that font.

That font was used specifically to make you look at it as not being corporate speak, which ironically probably made you more likely to trust it, when you shouldn't trust it at all.

Corporations are run by lawyers. Lawyers are boring. Lawyers are not going to approve sending invitations using a font like that.

Question 3: Why Would A Survey Contain Trap Quesitons?

For the record, companies pay people to A. make these things and B. to then organize the data. They're not going to put things into their dataset that are designed to be misleading. Why? Because if this was for internal use, meaning not something they put out in a press release, it serves no purpose if you get unclear data. You're not going to pay someone tens if not hundreds of manhours to quantify data if it's all useless.

Question 4: Is this being used for social engineering purposes?

Most scams are phishing scams. Meaning that they are trying to trick you. And the best way to trick people is to trick one person and then have them tell all their other friends about it, causing them to trick other people.

Why does misinformation spread? Not because there's a man with an evil mustache telling you lies. It's because someone you know believed something, and then told everyone else, and everyone who heard it went 'well, I trust that that person is smart, they wouldn't get scammed! I'm sure they know what they're talking about.'

That's literally how all your relatives got radicalized on facebook. Someone they know and trusted posted some meme and they went 'well, I trust them, so clearly there's something to this.'

Usually, they do this via emotional manipulation. They want you to be angry, because anger is the easiest thing to manipulate. These people use some pain point, like AI, or Gaza, or BLM, or whatever else, and they go 'we're thinking about adding AI to tumblr and making all our accounts AI, tell us what you think!' And they're expecting you to see that, freak out, and go 'no! I don't want that! I need to tell them and I need to tell all my friends to tell them too!'

You know, like how all those scam Gaza accounts were like 'hi! I'm an orphan who had my limbs blown off by zionists, please send me money we're dying! *insert link to a spoofed domain*'

Again, they are preying on your outrage. You are being targeted and they hope you spread it.

Modern scams on the internet are slightly more complex than the old three card monty or snake oil scam, but not by much. It relies on one scammer, and then waiting for someone to pick it up. In real life, this person is always working with the first person. On the internet, they don't have to be. But that person wins the card game or drinks the miracle potion and because someone has gone first it creates a permission structure for everyone else.

So what happens is that you see people reblogging it, and every single person that does gives it legitimacy, and that means even more people fall for it, because everyone goes 'well, clearly two thousand people wouldn't all fall for this!'

You are lemmings running off a cliff, because you've turned off your logical brain and you're acting emotionally. You are a bull that is charging at a waving sheet because they made it move in just the right way to make you act before you think.

Scams are just psychology and marketing applied for evil purposes.

The only way to combat them is to think before you join in with something. Because they can and will pit your good nature against you. They will make you feel like you are wrong for not sharing things. And that's how they spread everything from propaganda to scams.

hi guys! discord is doing a survey on how people would like ai to be integrated into discord. take it and say fuck no to every question. when you get to "in general, how do you feel about discord inegrating ai features?", respond that you would actively get everyone you know off of discord and wouldn't pay for nitro or other shop items if they added ai features.

watch out for the trap! there's ONE QUESTION where the last option *isn't* the max 'no AI' option, read each part carefully to be sure

Current belief is that this survey is a phishing link to grab your account info.

Whether it is or isn't, as a precaution, yall should change your passwords. If the link is real and actually from discord staff, great! You probably needed a password change anyway. If it's a scam, be safe

update from the discord group courtesy of one of my mutuals;

do not trust that damned survey. change your discord password. utilize 2FA.

I use 2FA on every website I log into, and it didn't ask for any details when I took the survey, but I still don't trust that thing at all. One can never be too safe.