4 ms·

My company uses his software for phishing practice. A week after joining new company, his software claimed that I clicked on a phishing link. I saw the phishing

My company uses his software for phishing practice. A week after joining new company, his software claimed that I clicked on a phishing link. I saw the phishing email, instantly knew it was a fake phish, never even opened the email, let alone clicked on any link. Still had to do the "you got phished" extra training, as neither my manager nor IT would believe that there was a bug. Mitnick really was quite the grifter before he turned his life around.

blkhawk 5y ago
Possibly your email client clicked that for you. This is actually a legitimate concern because some exploits work that way. Doesn't change that its a bug you got fingered for that tho.
- zibzab 5y ago
  Outlook and others may access embedded links on their own servers for security reasons.
GekkePrutser 5y ago
Yeah KnowBe4. My work bothers us with it too. Their emails are really easy to detect and have a huge header too describe what they are too :P
- blowski 5y ago
  Their videos are brilliant though. Can’t wait for the next episode of Inside Man.
  - shafyy 5y ago
    They are actually made by a company they bought, Twist and Shout (https://www.twistandshout.co.uk https://www.twistandshout.co.uk) :-)
  - the_af 5y ago
    The Inside Man is entertaining, but as the "show" progresses, it becomes progressively more a standard sitcom and less about security training. Past the first season, there are entire episodes which are mostly like a Netflix show, with a last minute message of "oh, and remember: never leave your laptop unlocked" tacked on. Entertaining? Yes. Useful as a training? Ehhh...
- magixx 5y ago
  Yeah, my company also uses this and I just have a filter setup to catch those emails and delete them. It's silly.
ryantgtg 5y ago
Exact same thing happened to me. I couldn’t even get a response from anyone in IT. That’s what happens when IT is a handful of people for a 50k person company with a third party offshore help desk.

blkhawk 5y ago

Possibly your email client clicked that for you. This is actually a legitimate concern because some exploits work that way. Doesn't change that its a bug you got fingered for that tho.

zibzab 5y ago
Outlook and others may access embedded links on their own servers for security reasons.

GekkePrutser 5y ago

Yeah KnowBe4. My work bothers us with it too. Their emails are really easy to detect and have a huge header too describe what they are too :P

blowski 5y ago
Their videos are brilliant though. Can’t wait for the next episode of Inside Man.
- shafyy 5y ago
  They are actually made by a company they bought, Twist and Shout (https://www.twistandshout.co.uk https://www.twistandshout.co.uk) :-)
- the_af 5y ago
  The Inside Man is entertaining, but as the "show" progresses, it becomes progressively more a standard sitcom and less about security training. Past the first season, there are entire episodes which are mostly like a Netflix show, with a last minute message of "oh, and remember: never leave your laptop unlocked" tacked on. Entertaining? Yes. Useful as a training? Ehhh...
magixx 5y ago
Yeah, my company also uses this and I just have a filter setup to catch those emails and delete them. It's silly.

ryantgtg 5y ago

Exact same thing happened to me. I couldn’t even get a response from anyone in IT. That’s what happens when IT is a handful of people for a 50k person company with a third party offshore help desk.