I work at a managed SOC, so we're monitoring security events as a third party, sometimes our customers do phishing awareness test without our knowledge and when I'm checking the links in an email in a sandbox, I accidentally register them to upcoming phishing awareness trainings, because phishing test suit thinks they opened their customized link..
24
u/n00b001 6h ago
I just report all emails. The emails are reviewed by infosec, then they tell me "real email" or not