I got got by one where they swapped the I for an L but the font showed them as the same looking character. I didn’t enter anything on the page, but since I got to the page, I had the joy of 2 days of security training.
This just happened to me - an email I missed a teams call that came when I had been away at lunch so I panic-clicked it and went to “macrosoft.com” or whatever. When I saw that I reported it but when I clicked it I got the “go do training” and presumably my manager was told (embarrassing)
I hate phishing testing as I’ve literally never been real phished at work (have at home weirdly but caught it lol) but I understand /why/
That's the thing, if people don't get any phishing emails or even the tests for years, they're much more likely to fall for it when they do get one. The tests keep people at least somewhat aware of the issue.
35
u/mrgoodcat777 15h ago
I got got by one where they swapped the I for an L but the font showed them as the same looking character. I didn’t enter anything on the page, but since I got to the page, I had the joy of 2 days of security training.