4 ms·
I have knowledge of some pretty sophisticated phishing tests run at a large organization. The click rate for links in those emails is shockingly high. If you
by 0xy 6y ago
I have knowledge of some pretty sophisticated phishing tests run at a large organization.
The click rate for links in those emails is shockingly high.
If you have a sophisticated attacker using spear fishing using company information then it's even more effective.
"Hey, [coworker X] told me I should send you our latest policy document for [project Y], here's the link"
- double0jimb0 6y agoA tactic made possible in other worlds, Powered by Facebook (tm)
- ayelmao303 6y agoThis doesn't make sense.
- tekdude 6y agoAt my last position, everyone got an email in mid-December saying that the company would be giving each employee a holiday gift... just click the link to select one from the options. It seemed very out of character for the company, so I ignored it. Many people were upset to find out that the free gift was, surprise, extra security refresher training.
- bawolff 6y agoHow to make your employees hate your security team and undermine all their efforts out of spite: 101...
- lotsofpulp 6y agoSeems like the employees are undermining all of the security team’s efforts by suppressing critical thinking at the prospects of getting a trinket.
- Craighead 6y agooh, Godaddy?
- toomanybeersies 6y ago> If you have a sophisticated attacker using spear fishing using company information then it's even more effective. I work for a large company with a common email address format, and I'm constantly getting personalised emails, complete with my name and vaguely related to my work, advertising training and seminars (although I'm yet to be targeted by a spear phishing attack). I assume they just trawled LinkedIn to find people working at the company and their role. Our email addresses follow a standard format, so it's trivial to guess what my email address is. We also get monthly simulated phishing emails from our security team. I've just gotten into the habit of not reading emails. Everything important comes through Slack, my email inbox is mostly automated emails from a dozen different services and company announcements that I don't bother reading.