Happened at my workplace. An phishing email went out to test how likely people were to click the link.
Anyone who clicked the link had to take phishing training. Anyone who forwarded it to our internal “hey this is a phishing email” service also had to take training… because the internal service would automatically click the link.
sounds like the internal phishing service should be the one needing to do training
Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?
I’ve worked a help desk before, while after dozens of people sending it in we don’t really need it forwarded anymore, people don’t know that until we get the I’d still rather people forward it than click it. Ignore and delete is best since I guarantee someone will forward it to IT, but forwarding (even forwarding and asking) is never bad and demonstrates good awareness.
deleted by creator
Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?
The URL likely is unique per user. They forward it, IT clicks the link, it registers that that user clicked the link even though IT did it.
IT clicks the link,
stop that part then
If only I had the power
I mean, just don’t click anything in a phishing e-mail
What if I click it a lot?
Good ideer, thanks
?
Could a swore I typed good idea. Was prolly high AF lol
Cletus dun took over yer kee-clicky box n typed it fur ye.