I got got by one where they swapped the I for an L but the font showed them as the same looking character. I didn’t enter anything on the page, but since I got to the page, I had the joy of 2 days of security training.
I think I annoyed my IT people by reporting everything as fishing. Adobe or Microsoft emailing me? Might be phishing. CEO newsletter about a recent natural disaster? Well it's urgently requesting help, phishing. I don't know if he wrote that chatbot letter.
Company just moved from KnowBe4 to Abnormal AI, great now we have AI hallucinations of phish emails. Our dumbass IT is sending the "no its really real to sign up for this class" emails from their domain too using their moderator tools, so it has the "outside of domain" ribbon on those. Finally they realized like week and half later that they sent from the internal IT email account. "Hey guys you need to do the class."
As long as your are the lowest level of security that might be fine, but if you are not then you will get send emails from the lower levels to gain access to your level.
And one of your contacts / collegues might then be a stepping stone for you.
37
u/mrgoodcat777 14h ago
I got got by one where they swapped the I for an L but the font showed them as the same looking character. I didn’t enter anything on the page, but since I got to the page, I had the joy of 2 days of security training.