this post was submitted on 13 Sep 2023
15 points (100.0% liked)

Tech Support Memes

2304 readers
1 users here now

Memes about IT and computer related things, funny screenshots, or things you see out in the wild.

founded 2 years ago
MODERATORS
[email protected]
15
Was that wrong? Should I not have done that? (lemmynsfw.com)
submitted 2 years ago by [email protected] to c/[email protected]
2 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 2 years ago* (last edited 2 years ago)

I find that Cybersecurity training emails hit every red flag for a phishing email even if it's legit:

  • From an external organization without my company's letterhead.
  • Automated and I receive it at like 4am
  • A message saying something to the effect of "IT has assigned important training for you"
  • A link whose URL is a long string to an unidentifiable site
  • Clicking the link immediately takes you to a login page to enter your company email.

If I wanted access to someone email and password maliciously, I'd totally make a cybersecurity training site like http://cybersecuritytraining.biz, tell people they are due for company cybersecurity training just like this and I bet I'd get a lot of accounts.