--- title: "The Privacy Tool Used to Phish You | Phish Protection" description: "The Privacy Tool Used to Phish You: With email security, it" image: "https://phishprotection.com/og/blog/the-privacy-tool-used-to-phish-you.png" canonical: "https://phishprotection.com/blog/the-privacy-tool-used-to-phish-you/" --- Quick Answer Unfortunately, it really is a never ending cycle. So, whenever the good guys come up with a counter move, the bad guys immediately jump on it and figure out some way to use that counter move in their next scam. Such is the case with two factor authentication (2FA). Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthe-privacy-tool-used-to-phish-you%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=The%20Privacy%20Tool%20Used%20to%20Phish%20You&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthe-privacy-tool-used-to-phish-you%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthe-privacy-tool-used-to-phish-you%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthe-privacy-tool-used-to-phish-you%2F&title=The%20Privacy%20Tool%20Used%20to%20Phish%20You "Share on Reddit") [ ](mailto:?subject=The%20Privacy%20Tool%20Used%20to%20Phish%20You&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fthe-privacy-tool-used-to-phish-you%2F "Share via Email") ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/08/what-is-phishing-6368.jpg) _With email security, it’s a never ending cycle of attacks and counterattacks_. Whenever the bad guys come up with some clever new way to scam people, the good guys eventually figure out a way to combat it. If only that were the end of the story. Unfortunately, it really is a never ending cycle. So, whenever the good guys come up with a counter move, the bad guys immediately jump on it and figure out some way to use that counter move in their next scam. Such is the case with two factor authentication (2FA). ![What is phishing](https://media.mailhop.org/phishprotection/images/2019/08/what-is-phishing-6368.jpg) _[2FA](https://en.wikipedia.org/wiki/Multi-factor%5Fauthentication) is a way to grant access to a computer system based on two pieces of evidence_. One is usually a username/password combo. The other can be any of several things including biometrics, tokens or a secret code texted to a mobile phone. 2FA is meant to make accessing computers safer. So, you knew it would only be a matter of time before the bad guys figured out some way to us 2FA against users. The latest **phishing scam** tries to use people’s trust in 2FA against them. According to[ Sophos Security](https://nakedsecurity.sophos.com/2019/08/23/instagram-phishing-uses-2fa-as-a-lure/), there’s a new phishing “attack received this week that was much more believable, this time going for Instagram accounts.” As I’ve written about previously,[ Instagram is now more popular than Facebook](/blog/instagram-popular-facebook-guess-hackers-are/) so naturally it’s being used more frequently by hackers to target users. According to the website[ Silicon Angle](https://siliconangle.com/2019/08/25/new-instagram-phishing-scam-targets-users-fake-2fa-codes/), “The messages, claiming that someone has tried to log into a user’s Instagram account, are designed to look as close as possible to the official Instagram messages. The use of a fake 2FA at the end of the message implies a certain **level of security**.” If that isn’t bad enough, “the use of an **HTTPS certificate** which delivers a padlock on the scam page is another attempt to draw users in as people have been trained to look for it as a sign of security.” _The hackers’ playbook is almost getting predictable_. Find a technology people think makes the web safe and use it against them to win their trust. ![What is a zero day attack](https://media.mailhop.org/phishprotection/images/2019/08/what-is-a-zero-day-attack-7426.jpg) Given how clever hackers are at using our trust against us, can you guarantee that you won’t fall for the next phishing scam? Probably not. That’s why you need some help. You need [protection from phishing.](/content/phishing-prevention/) Introducing some help: [Phish Protection](/). Phish Protection is a **cloud-based email security platform** that offers [phishing protection](/) to protects your entire company from all advanced phishing threats. Even the really clever ones. Try it free for 30 days. ## Topics [ Phishing Awareness ](/tags/phishing-awareness/) ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 14m 12 Real-World Spear Phishing Examples And The Red Flags You Missed Feb 4, 2026 ](/blog/12-real-world-spear-phishing-examples-and-the-red-flags-you-missed/)[ Foundational 2m 8 million Android users fell prey to SpyLoan malware on Google Play Store Dec 5, 2024 ](/blog/8-million-android-users-fell-prey-to-spyloan-malware-on-google-play-store/)[ Foundational 1m A Big Part of the Phishing Problem is You Sep 17, 2019 ](/blog/a-big-part-of-the-phishing-problem-is-you/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"The Privacy Tool Used to Phish You","description":"The Privacy Tool Used to Phish You: With email security, it's a never ending cycle of attacks and counterattacks . Whenever the bad guys come up with some.","url":"https://phishprotection.com/blog/the-privacy-tool-used-to-phish-you/","datePublished":"2019-08-27T08:33:48.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-08-27T08:33:48.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/the-privacy-tool-used-to-phish-you/"},"articleSection":"foundational","keywords":"Phishing Awareness","wordCount":431,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/08/what-is-phishing-6368.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"The Privacy Tool Used to Phish You","item":"https://phishprotection.com/blog/the-privacy-tool-used-to-phish-you/"}]} ```