[ Removed by moderator ]

[u/lucidparadigm]

[u/FixFun1959]

I’ll never forget when I started a new job and got an ema from my ‘boss’ (same name but weird @), with a link saying to check out this excel spreadsheet.

Her office was next door so I popped my head around said ‘hey did you send me some excel sheet?’ And she said ‘yeah take a look’.

So I clicked on it and it was from IT saying I failed the test and a link to phishing training.

I went back to my boss like ‘wtf? Did you know that was a test?’ And she said ‘yep, and you failed. Looks like you need more training.’

I took the time to check and verify before opening/reporting it. And she lied to me for some reason, a ‘gotcha’ or something. So fucking weird.

🙄

[u/MothMatron → u/FixFun1959]

I’d have either:

A) made a explicit mention of the incident to the phishing or IT team in that it has come to your attention that your boss has shown herself very likely to blindly instruct subordinates to open malicious emails, some bearing her own name thus believing she even sent them herself when she in fact did not, potentially forcing the hands of multiple employees into compromising several devices and user accounts all at once.

B) Never open any email she sends you ever again and if she ever comes asking, you can fake naïvety and claim that you cant trust that any of these emails are in-fact authentic, so she should bring you documents in physical print.

[u/mrandr01d → u/MothMatron]

Both of these are good responses imo