> - Training someone after they fall victim to a phishing attack makes them MORE likely to fall for future attacks. Fascinating. A fair number of training prog

> - Training someone after they fall victim to a phishing attack makes them MORE likely to fall for future attacks. Fascinating. A fair number of training programs seem to have the opposite of the intended effect. DARE (saying no to drugs) is a famous example. To guess a mechanism: the training gives some specific examples of phishing, probably from a few years ago, which don't match current techniques. The phishers also know what's in popular training courses, so they avoid known trigger phrases. So people are less likely to recognize a novel scam than if they'd never seen any.