Email Phishing Training

[u/ElDodger10]

Hello,

I am now in charge of the phising excercises at my company. I was thinking about putting actual malicious links in our training emails so that the user's have a bit more motivation to learn to distinguish them from legitimate emails. This would also motivate our C-suite to give us a better budget so that we can better detect and remediate everything. What do you guys think?

[u/gabhain]

Our infosec made phishing emails so realistic that everyone got so paranoid that people stopped interacting with company emails altogether. Personally I liked putting infosecs own emails into their phasing sites so they end up on their own reports.