3 ms·
The env it was accessed in shouldn't matter too much. Simply clicking on a link is a fairly small risk. Not zero risk but unlikely to be an issue. The real issu
by baroffoos 7y ago
The env it was accessed in shouldn't matter too much. Simply clicking on a link is a fairly small risk. Not zero risk but unlikely to be an issue. The real issue is when the link you clicked on asks you for a password and you type it in. You should only fail the test for giving a password.
- Kalium 7y agoClicking a link shows an attacker several things: * That their attack was delivered successfully to inboxes. * What email addresses are live. * Who is curious enough that they will investigate. * Who believes they understand and can handle the risks. These are not small things for an attacker to learn. Further, in a world where drive-by browser attacks are real, it's worth thinking very carefully if clicking a link in a phishing email should be regarded as essentially harmless.