I realize blocking all javascript is prone to error,
What legitimate email uses javascript?
And more important: which email clients do actually process Javascript that comes within an email? Thunderbird doesn't since 10 or 20 years ago. I don't know of any other as well. This phish is probably targeted to inferior web-based email readers who don't filter Javascript well. Are there any?

Reply via email to