4 ms·
I'd received an email on my corporate email address from some courier service claiming that they weren't able to deliver a package to me. The email also contain
by bladecatcher 11y ago
I'd received an email on my corporate email address from some courier service claiming that they weren't able to deliver a package to me. The email also contained a link which upon clicking took me to a page which displayed the message "congratulations! You've fallen prey to a phishing attack".
Later we realized that this was a test conducted by the firm (a large investment bank) that I work for!
- hrbrtglm 11y agoThe courier service vector is an effective way to trick people. You can ring an intercom in any big apartments block and ask to be opened the door to deliver whatever, most of the time you'll find a resident to open. No reason for it to not work in emails :)
- tomjen3 11y agoThat one is a classic, although the text is incorrect as you didn't fall prey to the attack by simply clicking the link (if you work computer is vulnerable that is ITs problem, if it is a zero-day then nobody is safe).
- bladecatcher 11y agoAgreed. I guess, this way it's easier to train people to avoid clicking on links they don't recognize.