Half the people here immediately deleted some survey about the work climate or something done by an external provider and didn’t even question it because it was so obviously a phishing mail.
I just ignored it thinking the same. Until my scrum master told me that we should please all answer that survey.
My company stresses to always be vigilant for phishing scams but their test emails are the only ones that I ever receive. That’s a good thing though because they always get plenty of people.
This one time I got a “test email” but it was sent from a legitimate domain, used our in-house style correctly, didn’t contain any spelling errors, contained personal information about me that a simple leaked email couldn’t reveal, and linked to a document on an internal server. When I opened the link, it said “this was a mock phishing email, your respone has been registered”. Literally the only time I got got, and their supposed “tell” was that the tone was more urgent than you’d expect. I just thought it was written by a stressed intern.
And then there’s me, when my company signed up all up for cyber security training to identify scams, I assumed it was a scam and deleted it…
Top tip guys, when you sign your staff up for this shit, tell them first.
Half the people here immediately deleted some survey about the work climate or something done by an external provider and didn’t even question it because it was so obviously a phishing mail.
I just ignored it thinking the same. Until my scrum master told me that we should please all answer that survey.
They think the security companies are their ally?
We were born in the scams. Moulded by them. I didn’t see a genuine banking email until I was already a man.
My company stresses to always be vigilant for phishing scams but their test emails are the only ones that I ever receive. That’s a good thing though because they always get plenty of people.
This one time I got a “test email” but it was sent from a legitimate domain, used our in-house style correctly, didn’t contain any spelling errors, contained personal information about me that a simple leaked email couldn’t reveal, and linked to a document on an internal server. When I opened the link, it said “this was a mock phishing email, your respone has been registered”. Literally the only time I got got, and their supposed “tell” was that the tone was more urgent than you’d expect. I just thought it was written by a stressed intern.
God damn that’s one hell of a red team. Who shit in their cereal?