phishing training really doesn’t spend enough time on “how to structure your mass corporate communications in such a way that your employees won’t conclude that you communicate exactly like scammers and still expect a reply so they’d better assume scammy emails are legitimate”

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqu56p82wp0ucpu7jkwcvvtfdc7wcmuqkdrqvzpkwl78rdkkckucq68ds0l my job did this before christmas. they even went an extra mile and registered a new domain "company name christmas gift dot com" and even created a new corporate email address. i was wo...

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqu56p82wp0ucpu7jkwcvvtfdc7wcmuqkdrqvzpkwl78rdkkckucq68ds0l I mean, it must be a test, right? A free gift, from corpo? C'mon.

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqu56p82wp0ucpu7jkwcvvtfdc7wcmuqkdrqvzpkwl78rdkkckucq68ds0l One of my petty pleasures is marking all of the emails from our infosec contractor as phishing attempts. They start with things like "You have been assigned" and I'm like, I don't work f...

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqu56p82wp0ucpu7jkwcvvtfdc7wcmuqkdrqvzpkwl78rdkkckucq68ds0l The real scary email isnt some dumb phishing. The scary is straight forward. "We are a #ransomware operator. We would like for you to run this script on your work machine. If you do, ...

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqu56p82wp0ucpu7jkwcvvtfdc7wcmuqkdrqvzpkwl78rdkkckucq68ds0l a large company i worked at had mandatory phishing training as a video. they outsourced but HR forgot to let anyone know that the email for the video would come from an external firm a...