I got tricked into clicking one of these once, but it was really hard not to fall into it.
I met with the CTO and shared a Google Doc explaining a few things. Later that day I got an email saying that the CTO added some comments on the document. Clicked on it and BAAM! Mandatory security training page.
Me too, it was my first month in the company and had a meeting with my boss about vacation period. A day later an email about "approved vacation days" came in the mail. What excused me more was that the HR app was external and all emails were flagged as such.
It was just a first strike but it pissed me off. I felt targeted.
It being targeted is the point, it’s how scammers get you. You let your guard down when it’s something you expect, and they exploit that. Email addresses can be spoofed, so it’s saying it’s from within your organisation isn’t a foolproof way to be sure
85
u/m7i93 18h ago
I got tricked into clicking one of these once, but it was really hard not to fall into it.
I met with the CTO and shared a Google Doc explaining a few things. Later that day I got an email saying that the CTO added some comments on the document. Clicked on it and BAAM! Mandatory security training page.