Found a phishing email so good it fooled our own IT guy

Got one yesterday claiming to be from our CEO asking for gift cards. Looked legit, domain was one letter off. Our IT guy clicked the link before I flagged it. We ran a test after and 14 out of 30 staff would've fallen for it. Anyone else running fake phishing drills at work?

1 comments

1 Comment

colegarcia18d ago

Hate to be that guy, but maybe the phishing email is doing you a favor. If your IT guy clicks that stuff, you got bigger problems than the test results. Those drills just teach people to second guess every email, which means they'll ignore real ones from clients or vendors cause they're scared. Then you're the one apologizing for missed invoices and deadlines. And running a fake attack on your own staff kind of trains them to not trust anything, even the CEO when he actually needs something. Sounds like you're building paranoia, not security.