• OneCardboardBox@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    116
    arrow-down
    2
    ·
    1 year ago

    Happened at my workplace. An phishing email went out to test how likely people were to click the link.

    Anyone who clicked the link had to take phishing training. Anyone who forwarded it to our internal “hey this is a phishing email” service also had to take training… because the internal service would automatically click the link.

      • doctordevice@lemm.ee
        link
        fedilink
        arrow-up
        57
        ·
        edit-2
        1 year ago

        Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?

        I’ve worked a help desk before, while after dozens of people sending it in we don’t really need it forwarded anymore, people don’t know that until we get the I’d still rather people forward it than click it. Ignore and delete is best since I guarantee someone will forward it to IT, but forwarding (even forwarding and asking) is never bad and demonstrates good awareness.

    • __init__@programming.dev
      link
      fedilink
      arrow-up
      9
      ·
      1 year ago

      They got me good with this one time. It looked like a newsletter from like Seattle times or something, I was like I didn’t sign up for this shit and immediately clicked the unsubscribe link, boom enrolled in training. Well played, guys.