3 ms·
My company makes everyone take phishing training twice a year, yet at the same time they pay for services that send emails looking like phishing. Outlook of cou
by aljarry 5y ago
My company makes everyone take phishing training twice a year, yet at the same time they pay for services that send emails looking like phishing. Outlook of course shows the warning "This email originated from outside of organization. Please be mindful of phishing attempts...".
It's not only marketing. Tons of services allow spoofing senders name, and try convince you they've been sent by actual people.
- tharkun__ 5y agoI'm interested: Does your company in this training allow you access to what usually is a dead simple way to identify 99% or phishing/spam emails? I luckily don't work for companies that do this regularly but the ones I've seen online before and the one I did have to do, do not give you access to the headers. While I realize that most non-techies won't know how to do any of that, it's the easiest for any technically inclined person. The first defence is the real email address (which I always have displayed by default anyway), which gets rid of a large swath of them already and the rest are usually pretty clear from some of the others headers. It has never happened to me that something as intriguing as this post's message came in.
- aljarry 5y agoOf course not :) They are targeted towards non-techies. Look at emails content, there's domain which looks funky and a URL you're asked to click -> that's phishing for sure! Which begs a question: why they haven't "blessed" the messages from external providers, that are actually legit? Like with a warning "This message comes from a trusted third party".