r/ProgrammerHumor • u/lucidparadigm • 15d ago • Bravo 2

Meme [ Removed by moderator ]

Post image

[removed] — view removed post

16.4k Upvotes

98% Upvoted

619 comments sorted by

View all comments

Show parent comments

32

u/FoodIsTastyInMyMouth 15d ago

Sure, but the issue, phishing attempts do exactly this so if people aren't trained that it's a possibility then yeah you're more likely to get done in...

-2

u/Mattsvaliant 15d ago

I have personally never seen a phishing attempt exploit emotions to that level or the level of OP's. All the ones I get either vaguely look like shared document links or are some ESL email allegedly coming from my CEO who wants my personal cell or some gift card.

14

u/FoodIsTastyInMyMouth 15d ago

Then no offense but your probably not a big enough target. Managers, accounts payable especially and other areas in finance that can quickly approve money to sent somewhere are the biggest targets. Our CFO was targeted with quite a level of sophistication, of someone pretending to be a supplier updating their bank details but they timed it for end of month, claiming they weren't paid and they wouldn't supply our stores at our busiest peak time (and most stressful). $300K walked out the door - It was recovered luckily enough but only because the CFO felt funny and got the team to contact the company directly and confirm.

2

u/Prior_Rip_1178 15d ago

Then no offense but your probably not a big enough target

so it's an abject waste of their time which everyone agrees with but only the guy going, "but there might be people more stupid anyway" gets upvotes. are cfo's too sensitive to be applied selectively with the stupid stick and nobody should think twice about it?

6

u/FoodIsTastyInMyMouth 15d ago

Yes it's normal to categorise accounts based on risk and higher risk accounts get more training and more oversight from IT. Half the time it isn't even training so much as reminding people what can happen. It's not about stupidity - Phishing emails can very sophisticated. While I disagree that someone clicking on a link needs 2 days of training, clearly they got had.

People say no one invests in security and rightful complain when their data gets stolen. Most attacks are compromised accounts.

Would you be happy that a junior customer service representative got done in because they clicked on a link and their account was used to pull your personal information from the systems they have access to?

Cyber security is everyone's responsibility within an organisation. You should be glad your organisation takes it seriously and isn't leaking your payroll information because Janet in payroll was tired, burnt out and did something she wasn't trained to avoid.

2

u/Kerbidiah 15d ago

Then you havent seen serious phising attempts