Hey Everyone, posting now but will answer questions early pacific time once I'm awake. Happy to chat about why and how we made the extension.
Our motivation is that phishing is the cause of 90% of breaches yet all we do is security training (to nebulous effect) and block-lists which are always out of date. With a torrent of vibe-coded phishing sites on the way we need better tools to thwart the phishing threat.
We interrupt Stingray’s Product Hunt launch for some breaking news: you died!
Or at least that’s what your family members are saying.
Or at least that’s what a sophisticated group of cybercrime phishing scammers are telling users of LastPass, the password management tool, that their family members are saying.
LastPass users were told a family member claimed the user had died, was trying to recover the user’s login credentials, and the only way to stop the family member was for the user to provide their LastPass master password.
Of course, this was all a scam.
It didn’t stop there: the phishing emails went by individualized links. If a user clicked on the link, the scammers followed up directly with a phone call, urging prompt action.
We’ve posted more information on our LinkedIn profile, if you’re curious.
We’ve built Stingray to help stop scams like this. Have a look at our promo video to see how it works, or try it by download now from the Google Chrome store - completely free, no passwords or credit cards required.
We’d love your feedback.
Stingray's technical co-founder @imackinn (Waterloo & Stanford alum) is doing an AMA today - head on over to hit him with hard questions or ask him about his record-breaking TikTok:
https://www.producthunt.com/p/stingray-security/i-m-the-technical-co-founder-of-stingray-ama
Hey Ian, before I download want to ask, what permissions would I need to allow the extension?
@sanket_mittal it heeds all_hosts which allows it to read your browsing. Google vets these permissions tightly for obvious reasons but to see if there's a threat we really need to look at page contents. We don't store your browsing and don't track domain requests. The only time our backend knows a site you've visited is if you manually report a page, scan one, or if our automated detection finds a phishing site.
Swytchcode
Congrats on your launch team! It looks like a great product. I'll give it a try