Security Expert Troy Hunt Lured in by Mailchimp Phish

Troy Hunt was targeted by a well-crafted Mailchimp-themed phishing email that directed him to a fraudulent mailchimp-sso.com page; after entering credentials and an OTP the attackers exported roughly 16,000 mailing-list records (including unsubscribed addresses). Cloudflare later took down the malicious domain, Hunt reset his password and regained access, and the incident underscores the increasing sophistication of phishing, risks from retained unsubscribed data, and the importance of MFA and vigilance.