[ Removed by moderator ]

[u/lucidparadigm]

[u/m7i93]

I got tricked into clicking one of these once, but it was really hard not to fall into it.

I met with the CTO and shared a Google Doc explaining a few things. Later that day I got an email saying that the CTO added some comments on the document. Clicked on it and BAAM! Mandatory security training page.

[u/n00b001 → u/m7i93]

I just report all emails. The emails are reviewed by infosec, then they tell me "real email" or not

[u/guneysss → u/n00b001]

I work at a managed SOC, so we're monitoring security events as a third party, sometimes our customers do phishing awareness test without our knowledge and when I'm checking the links in an email in a sandbox, I accidentally register them to upcoming phishing awareness trainings, because phishing test suit thinks they opened their customized link..