Cybersecurity - Memes

My company sends out these kids of phishing scam test emails too. They were actually pretty decently faked. But, they use the same identifying string in the header of each and every one, so I made an outlook rule to quarantine them In a particular folder so that I could correctly report all of them. Occasionally I report the weird legitimate email surveys we get from HR too and mass emails from IT with bad spelling, just so they don't get suspicious of my perfect record.

That’s what always kills me… the line of “this is not a phishing email” as if just anyone can’t add that. If anything that line makes me more suspicious.

My company unfortunately uses Microsoft 365 and when they started setting that up, I got an e-mail from a microsoftonline.com domain, which asked me to enter my username and password.
I reported that mail immediately as phishing. Like, it used the ol' confusing domain trick and everything, it's gotta be phishing.

Turns out, nope, Microsoft legitimately operates that domain and uses it for account notifications of all things. Great job, guys.

I blocked these emails for years for this reason. We actually do get real phishing attempts about once every other month when a client gets compromised. Makes everyone at our company very vigilant.

Management got pissed when I hadn't done any of them. Apparently, the emails in english/spanish/french with "click me" links were legit, lol. I set up extensive rules and blocklists for a reason. Pretty sure it's for SOC2 compliance or something.

We had something like this too. The header had our company's logo as just a rectangular white picture. It looked like someone just copy/pasted the first result on Google images.

Yeah you'd think a company could forward from their own domain or something, but I get a ton of legit emails from non company domains because I guess they're to lazy? Anyway, I just try not to click any email links.

The correct solution to this is to have the training emails say to log in to take the training, no link in the email at all

Had this at a previous company. Why didn't they just use their regula URL instead of "(company)university.com" I don't know. Reported as fishing

Then both the csec course failed to educate the employees, because a responsible trained employee would report or ignore those mails lol

And now you've passed the second test. Don't trust links in dodgy emails.

Do they mean a banner in the message with a report suspicious link?

Sounds like a genius move if he didn't then fuck it up by the meeting thing.

It's targeted to those who need the training.