Phishing email attempt - be careful out there
I just received this phishing email and thought I would share it with the community as a reminder to stay safe and always inspect before you click. I already forwarded the email to 1password (with headers) in addition to reporting it to the abuse email of the campaign service it came from. Not sure how they got ahold of the email though.
Thank you to everyone who shared information about the phishing emails they received. We appreciate the community working together to keep each other safe!
As others have suggested, we believe these emails were sent to a large number of people in the hopes that some of them happened to be 1Password users. We've identified the platform used for sending the phishing emails and reported it to their security team. Additionally, we can confirm that the phishing domain has been taken down.
If you ever receive emails like these claiming to be from 1Password, you can always email abuse@1password.com to confirm whether they’re legitimate. If you opened the link in the phishing email or any other suspicious links and entered your details, contact support@1password.com and we’ll be able to help.
You can learn which domains 1Password uses to send emails and what links are used for marketing, so you can validate messages you receive, using this guide: 1Password email and marketing domains Support.
Thank you all again and let us know if you have any questions!