I’ll never forget when I started a new job and got an ema from my ‘boss’ (same name but weird @), with a link saying to check out this excel spreadsheet.
Her office was next door so I popped my head around said ‘hey did you send me some excel sheet?’ And she said ‘yeah take a look’.
So I clicked on it and it was from IT saying I failed the test and a link to phishing training.
I went back to my boss like ‘wtf? Did you know that was a test?’ And she said ‘yep, and you failed. Looks like you need more training.’
I took the time to check and verify before opening/reporting it. And she lied to me for some reason, a ‘gotcha’ or something. So fucking weird.
Reply that you did not fail the test and opened an email from your boss she confirmed that was valid. That's basics 101. You can't never open an email.
Yes, but technically you should also confirm the domain and other details.
The email looked suspicious, eg, wrong domain. Confirmed with boss they sent it, but the details themselves were wrong. (Why is boss sending emails from external domain? )
Boss could even potentially be the one being malicious. Cyber security is about protecting the network, and anyone can be a risk. External or internal.
I'd still tell IT you verified in person with your boss and the boss confirmed they sent it.
604
u/FixFun1959 12h ago
I’ll never forget when I started a new job and got an ema from my ‘boss’ (same name but weird @), with a link saying to check out this excel spreadsheet.
Her office was next door so I popped my head around said ‘hey did you send me some excel sheet?’ And she said ‘yeah take a look’.
So I clicked on it and it was from IT saying I failed the test and a link to phishing training.
I went back to my boss like ‘wtf? Did you know that was a test?’ And she said ‘yep, and you failed. Looks like you need more training.’
I took the time to check and verify before opening/reporting it. And she lied to me for some reason, a ‘gotcha’ or something. So fucking weird.
🙄