23
Had a brutal week with a phishing simulation at my company
Last Tuesday our IT team ran a fake phishing email about a 'mandatory payroll update' and 40% of our 200 person staff clicked the link and entered their password. I was one of the people who fell for it, and I felt like an idiot during the follow-up training session. Has anyone else had a company-wide phishing test that made you rethink your own habits?
2 comments
Log in to join the discussion
Log In2 Comments
charlie_roberts871mo agoTop Commenter
The way they set it up with payroll made it extra cruel, everyone is paranoid about missing a paycheck so it preys on that fear. Those follow up sessions are rough though, sitting there knowing you got tricked while the IT guy gives you the disappointed dad look. At least now we know how easy it is to fall for stuff like that, makes you question every email you open.
7
jana_davis901mo ago
That follow-up training is basically the adult version of being sent to the principal's office for something you didn't realize you were doing wrong. Payroll phishing is a dirty trick too, but I guess that's the point. Now every time I get an email about benefits or direct deposit I spend five minutes staring at the sender address like I'm cracking a code. At least now you know you're not alone in feeling like the company guinea pig for their security experiment.
1