1227
Free iphone (piefed.europe.pub)
submitted 10 months ago by to c/programmer_humor@programming.dev
72 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 10 months ago (1 child)

seccomp sent pre-notice emails out about the phishing tests that were coming.

75% of the company reported the pre-notice email as phishing (even the CEO).

we did it mostly because the seccomp team was a huge thorn and caused so many unnecessary delays due to them injecting themselves into every single process.

the CSO quit soon after and some of their lackeys with them. we then hired a competent leader that worked with the org to meet compliance and regulatory requirements instead of being a blocker.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 10 months ago

    People see the word "phishing" and automatically remember that phishing mails exist, so their first reaction is to report them, not read them.

    Had to setup a fake phishing system as well.

    Before the training was setup, people rarely reported mails. But the moment we send out mails about the phishing training, a ton of those got reported.

    If phishing mails actually told you they were phishing, we wouldn't need training.

  • permalink
  • fedilink
  • source
  • parent