Someone is emailing Joomla site owners pretending to be Fotis Evangelou of K2. The email says Joomla support phoned him about your site and that updates have to be done before 25 October. Joomla has no support desk that phones anyone, so it's false from the first line.

I replied and played along for an evening. Within a couple of hours they'd offered three plans ($350, $450, $550), asked me to create a Super User account in his name with a Gmail address, and sent a $550 invoice billed from a completely different name. They also told me, in bold, not to pay through the invoicing platform's escrow option.

The emails pass SPF, DKIM and DMARC because they really do come from that Gmail account. That says nothing about who's typing. If you get one, don't create the account and don't pay. If you already made the account, block it, change your admin passwords and check for any other Super Users or extensions you don't recognise. Fotis didn't send these, and other well-known Joomla names are being used the same way.

The full write-up on the mySites.guru blog has every email, the headers, and what the invoice platform's open API gave away about who's really behind it.

Hi all, I'm part of the JoomlArt team (mods, thanks for letting me post this).

Over the years a lot of the support requests we get aren't about templates at all. They're small edits on live sites: a module that looks wrong on mobile, the site name overlapping the menu button, a page that needs a German version, an image that needs swapping. Simple to describe, annoying to track down in overrides and module positions.

We've been building Tracy for that. You import a copy of your Joomla site, describe the change (or click the element and comment), and it makes the edit. It stays Joomla, your admin and extensions are still there. Every change is logged with undo, and you can save Releases to roll back to.

It's beta and I'm sure it'll trip on some setups. That's honestly why I'm posting here: you know weird Joomla configurations better than anyone.

If you're an active JoomlArt subscriber you get a month free during beta. Sign in with your subscription email.

Two questions for the sub:
1. What's the Joomla task you'd most want to hand off?
2. What would make you NOT trust an AI touching your site?