I'm a bit bored of all theses journalists/media claiming the 'lock' icon is a good valor to know if you are browsing a legitimate site or not.

I received a mail like one hour ago from EDF:

Obviously this is a phishing message but.. if we click on the link provided we go here:

This site have a valid SSL certificate:

Next step of the scam: attach your personal documents:

Some people fallen on this scam and uploaded their identity cards, passports, driver license and even their bank informations.

Their scam is well coded.. oh wait..

And the hacker responsible for this is drotanique8@gmail.com

Stop teasing us with your 'lock' stuff, SSL mean nothing and can be terribly insecure.

Some fun: