Reporting a security issue....

[rew2]

I just got an Email: Someone logged into your account, was this you <link>yes <link> no. 

This is a typical scam to fish for people's credentials right? 

Well... one thing that the legitimate versions do is to start with hello <firstname>, with the actual name of the person account-holder filled in.  The scams usually start with "hello, " or with "hello firstname" i.e. with the string "firstname" like that. 

Weeeelllll...... I'm pretty sure I got a legit one (even if it wasn't me!) that started off with "hello firstname" with the literal text "firstname" in my language. My guess is that hte original english works, but that some or all foreign language ones don't. 

My guess is that the template for each language is: hello $firstname and that the Dutch translator should be instructed not to translate the stuff after the $ signs... So "hello" translates to "Hallo" in dutch and "$firstname" should remain "$firstname" and not be translated to "$voornaam" or "voornaam". 

Another idea: Make it possible for people to report security issues. I couldn't find it. And the chatbot (who takes ages to type "please give me your question") does absolutely nothing with "I want to report a security issue". The programmed answer might be to a reporting form, or just an Email address. That would work. 

[Lusil]

Hi there @rew2, thanks for posting here today!

Generally, if you receive a suspicious email notification, the first step is to check if it came from an official domain. 

From there, you can forward the suspicious email to abuse@dropbox.com for our team to investigate.

You can find more information about this, here. 

Have a look through it and let me know if you have any other questions. Cheers!

[rew2]

You are no better than a bot. You trigger on a keyword, and respond with the canned response. 

Expertise level: 0/5

customer sympathy: 0/5

overall experience: 0/5