A $60 security key stopped a scam that almost got my crypto account
Got a targeted phishing text pretending to be my exchange last Wednesday, and I almost typed my password into a lookalike site. Luckily I had bought a YubiKey for $60 back in January after lurking here, and the fake page couldn't complete the hardware challenge. It locked me out right before I entered my 2FA code, which felt super weird to be grateful for. The attacker even called me 10 minutes later impersonating support, but the key already did its job. Anyone else had a physical key save them from something specific, or do you rely on app-based codes?
Feels like everyone on here is convinced they're getting targeted by nation state hackers or something when most of these scams are just mass texts sent to thousands of numbers. Like yeah it sucks you almost got got but that's kind of the point, they cast a wide net and hope a few people bite. A $60 key for that is fine if it makes you feel better but let's not act like you were specifically chosen here lol.