• tiramichu@sh.itjust.works
    link
    fedilink
    arrow-up
    144
    ·
    13 days ago

    A previous (huge) company of mine sent out a lot of phishing test emails, some of which were pretty convincing.

    As developers, we quickly discovered that all the emails had a metadata header in them which identified them as a phishing test, so we set up a filter for it so every email since is clearly coded with a bright red “Phishing test!” label.

    • Ephera@lemmy.ml
      link
      fedilink
      English
      arrow-up
      16
      ·
      13 days ago

      Here they started doing such phishing tests a while ago and our IT department had significantly worse stats than other departments, in terms of how often we would click on the link in the phishing mail.

      And yeah, the conclusion was that we were just being asshats that decided to poke around in the obvious phishing mails for the fun of it. Rather than getting extra security training, management told us to just stop dicking around, so that our stats look better.

    • Dave@lemmy.nz
      link
      fedilink
      arrow-up
      11
      ·
      13 days ago

      Where I work they use the microsoft phishing simulation, for which they publish a list of domains they send from.

    • brbposting@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 days ago

      Assuming that’s disabled -

      experienced folks can get caught (e.g. maybe waking up before dawn or something)

      Can be a good reminder, a little humbling!

    • Honytawk@feddit.nl
      link
      fedilink
      arrow-up
      1
      ·
      12 days ago

      Did it also label real phishing mails?

      Because those tests are send out for a reason. And in my experience, developers are some of the worst at cybersecurity.

      • theolodis@feddit.org
        link
        fedilink
        arrow-up
        1
        ·
        12 days ago

        Honestly, I don’t click on anything in Emails. If it is important, somebody will write me in Teams/Slack, and otherwise I just acknowledge and ignore.