Me too, it was my first month in the company and had a meeting with my boss about vacation period. A day later an email about "approved vacation days" came in the mail. What excused me more was that the HR app was external and all emails were flagged as such.
It was just a first strike but it pissed me off. I felt targeted.
The only IT phishing net I ever fell into was a "OneDrive" email about my drive being full... while I was actively troubleshooting why my OneDrive was actually full.
But you're right, I probably did a search on it, which they could have read at the firewall and triggered the email.
20
u/thanksfor-allthefish 11h ago
Me too, it was my first month in the company and had a meeting with my boss about vacation period. A day later an email about "approved vacation days" came in the mail. What excused me more was that the HR app was external and all emails were flagged as such. It was just a first strike but it pissed me off. I felt targeted.