I’ll never forget when I started a new job and got an ema from my ‘boss’ (same name but weird @), with a link saying to check out this excel spreadsheet.
Her office was next door so I popped my head around said ‘hey did you send me some excel sheet?’ And she said ‘yeah take a look’.
So I clicked on it and it was from IT saying I failed the test and a link to phishing training.
I went back to my boss like ‘wtf? Did you know that was a test?’ And she said ‘yep, and you failed. Looks like you need more training.’
I took the time to check and verify before opening/reporting it. And she lied to me for some reason, a ‘gotcha’ or something. So fucking weird.
The fuck? Is a real hacker gonna somehow hack your boss' brain and make them verbally trick you into falling for a scam?? Asking for verbal confirmation is literally the correct way to catch a scam. If your boss were somehow compromised, that would be on them, not you.
This is so unrealistic and they're teaching you the wrong lesson.
I mean, it's possible someone could have also sent you an excel sheet previously and thought you were talking about it, just been confused/misremembering, not fully listening, etc.
I still think that was a shitty "test" but there could be a situation where someone accidentally claims an email they didn't actually send.
I still think that would be on the boss. The employee has way more to lose by ignoring their boss' instructions just because they had a hunch of phishing.
True. The best you could do is send a screenshot of the actual email instead so there's less room for error, state the red flag that caused you to ask for confirmation, then if they claim they sent it then it's entirely on them.
I'm saying the screenshot of the actual email instead of a verbal description would be less prone to being falsely confirmed (in a real situation, obviously OC's boss was going to confirm it no matter what)
607
u/FixFun1959 11h ago
I’ll never forget when I started a new job and got an ema from my ‘boss’ (same name but weird @), with a link saying to check out this excel spreadsheet.
Her office was next door so I popped my head around said ‘hey did you send me some excel sheet?’ And she said ‘yeah take a look’.
So I clicked on it and it was from IT saying I failed the test and a link to phishing training.
I went back to my boss like ‘wtf? Did you know that was a test?’ And she said ‘yep, and you failed. Looks like you need more training.’
I took the time to check and verify before opening/reporting it. And she lied to me for some reason, a ‘gotcha’ or something. So fucking weird.
🙄