A previous (huge) company of mine sent out a lot of phishing test emails, some of which were pretty convincing.
As developers, we quickly discovered that all the emails had a metadata header in them which identified them as a phishing test, so we set up a filter for it so every email since is clearly coded with a bright red "Phishing test!" label.
Shit.... I'm doing that course in normal business hours. Get fucked brenda!
we do monthly phishing tests and some of our people are so bad that we put in the test email "this is a phishing email, do not click sign in" above and below the sign in box and they still give creds
If a coworker leaves their pc unlocked near me I like to click the phishing emails so they have to do the course. Tee hee!
We all have to do the course. And honestly I'm not even mad.
In my line of work, most people are not computer savvy. We're running Windows 11 and no one has admin privileges, even the highest ranking people. They're all limited. That's fine. We can't install anything. I'm pretty sure I could hit up PortableApps and get some portable software working, but I'm not trying to push my luck. I'm pretty sure I know what I can and can't get away with, but it's a good job and I don't want to mess it up. Besides, a lot of people are illegally streaming sports or movies and getting away with that, so IT security is pretty lax. That's probably true at a lot of places.
I don't mind the cybersecurity courses because I mute them and make them run at double speed and I ignore them, clicking through, then I ace the test. It's not that I don't care. I just know the material already. I've also helped coworkers who earnestly sat through the whole thing and are genuinely struggling. I know they hate how casually I get all the questions right, but they hate having to go through it a second time even more.
Plus, there's one vendor of training videos that is kind of like an office comedy, and one of the workers has a bunch of anime fan art in their cubicle. So it amuses me to no end that all of my coworkers are seeing these characters. It's nothing recent and I haven't seen it in a while. I know Killua from Hunter x Hunter is there. 12 year old boy, has super powers, something with lightning? (been ages since I watched HxH, and Meruem best boy) and he can rip your heart out of your chest (he's done it before). I feel like they need to add Anya Forger (from SPYxFAMILY) to the wall. That would be funny. (Telepathic toddler, dumb as a box of rocks, and just as adorable.)
Why would they have to come in at 7am?
The head of IT at one of my old jobs won 3 or 4 iPhones circa 2007
I read an interesting report about how most of these courses are rather ineffective because it adds knowledge but doesn't change behaviors.
https://www.cybersecuritydive.com/news/cybersecurity-awareness-training-research-flaws/803201/
I wish I could get my flock of idiots in for a course. I'm sick of uninstalling swift browser
Well, did he win?
The twist? The cat was Toonces and he never did make it into work that day!
Can I just sign a waiver making me financially liable if I fall for a phishing email? Seems easier.
Me, the idiot who clicked the link: "I'm sorry, I'm sorry, I'm sorry. I get four hundred of these a day and I hit the wrong button. I'm sorry."
You, the cybersecurity officer who just gives the Everyone group full administrative access to the entire network: "Fucking asshole, I hope you've learned your lesson"
Our Boss, who just asked his shareholders to pay him a $1T bonus: "That's it, I've had enough of all this human idiocy, I'm replacing everyone at this company with AI"
The Board: "The company is run by geniuses. We're all bidding up the price of the stock by another $100B in market cap."
My company like to do this with us by rage baiting us.
"New storage policy is 10 days. click link to save all your stuff before deletion."
Like you POS! How are we not going to immediately panic when the company actually pulls this crap normally!!!
top 50 comments