5 ms·
Train firm’s ‘worker bonus’ email is cybersecurity test
- lain_wired 5y agoThese tests are done by infosec staff who don't know how to code or contribute anything useful to a company, great reason to fire the whole department and start over
- jaclaz 5y ago>These tests are done by infosec staff who don't know how to code or contribute anything useful to a company, great reason to fire the whole department and start over The issue being that the replacement will be "infosec staff who don't know how to code or contribute anything useful to a company", you would likely spend some money on severance/whatever costs the firing carries and some money for the HR/headhunters/etc hiring the new people.
- joezydeco 5y agoMy company does these too, and they're supremely irritating, but the screening doesn't work if the emails don't attract attention. And now we're reading about a major gasoline pipeline in the USA shut down because of a ransomware attack. If I was infosec for a train line I'd be scared shitless these days.
- twobitshifter 5y agoIf they were truly phishing it would be a great ploy, but here’s it’s just cruel. If someone is motivated enough to do the social engineering, they will be able to get a click. You will need something like proofpoint (not foolproof) if you allow links in your emails. If your company is large and ever fluctuating, to make everyone on your network a phishing expert is an insurmountable task.