5 ms·
True. Phish testing campaigns in companies that send fake phishing emails to employees, are probably full of inaccurate data due to this. "Why did you click th
by _wldu 5y ago
True. Phish testing campaigns in companies that send fake phishing emails to employees, are probably full of inaccurate data due to this.
"Why did you click that link? But, I didn't."
- mike_d 5y agoMany phishing test as a service companies will report clicks vs. people who actually interact with the page.
- SilverRed 5y agoWhich is more accurate since clicking a link is not usually an issue while filling out a form on it is the real attack.
- sodality2 5y agoMost companies still trigger whatever action (disciplinary, additional training) upon just clicking the link, though.
- joering2 5y agoWould you mind naming some? I kind of have a hard time finding those, and some time ago I purchased phishingly.com for a side project, but it doesn't seem I will be working on this anytime soon, so I may as well pass it on.
- inetknght 5y ago> Phish testing campaigns in companies that send fake phishing emails to employees, are probably full of inaccurate data due to this. Anecdata: just running curl on one of those test URLs will trigger a failure and can result in a long discussion with HR and IT. > > Many phishing test as a service companies will report clicks vs. people who actually interact with the page. > Would you mind naming some? KnowBe4 is one such company. Their emails are also easy to spot because they'll have an X-PHISH-TEST email header.