4 ms·
My company has been sending out monthly tests for about 2 years now. There were some modest early gains (~33% -> 20%) but it's been stuck there for 12 months or
by scrooched_moose 6y ago
My company has been sending out monthly tests for about 2 years now. There were some modest early gains (~33% -> 20%) but it's been stuck there for 12 months or so.
They're not particularly convincing fakes either: "please update your password sent from @ourc0mpany.com" or "Dear Customer, your Worldwide Freight package has shipped" type things.
- maccard 6y ago> Dear Customer, your Worldwide Freight package has shipped I had a package shipped from the US to the UK by my company's shipping provider a few months ago due to covid. I honest-to-god thought I was being phished. The email had one of those titles, a typo in the body, no tracking number, was sent from a third party domain. the template email told me to click a link to an external third party via a url shortner, and when you got there you had to enter your "email address and password" which turns out is actuallu my work SSO login and it checks via ldap. Insanity!
- runarberg 6y agoI wonder if those modest gains could have been achieved with a simple non-phishing email telling people about the risk. I also wonder if those gains transfer to real emails, or did the workers simply learn to recognize these particular fake phishing attempts.