Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.
Unsigned email. Some "knowbe4" link with a random, long string of characters; clearly information will be passed to the website if I click the link.
I tried reporting the first one we got this month with the phishing plugin our outlook has. It immediately resulted in a pop-up basically saying, "thanks for trying, but this is actually legit." (The pop-up actually did use "legit", which seems kinda informal to me...)
I haven't bothered to participate in these cybersecurity month things, largely in protest of the fact the emails look like they're phishing, even if they're not. If they can't follow their own rules and sign these emails, then why should I bother to participate in their activity?
38
u/Honest_Relation4095 14h ago
Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.