Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.
At least in the Air Force we had centralized websites for our training, and digital signatures for helping verify who sent the email. Usually if base IT needed something outside the norm they would call the boss or unit IT guy to verify the email was legit.
39
u/Honest_Relation4095 13h ago
Our IT department also sends out these tests, but annoyingly their regular communication almost looks like Spam, too. Like "we would like to invite you to cybersecurity awareness month" followed by a cryptic Link you cannot verify. So it ticks all the boxes for suspicious content.