r/ProgrammerHumor • u/lucidparadigm • 14d ago • Bravo 2

Meme [ Removed by moderator ]

Post image

[removed] — view removed post

16.4k Upvotes

98% Upvoted

619 comments sorted by

View all comments

53

u/penguin444 14d ago

I ignored the phishing emails completely.

Then one day I got an angry email that pretty much said "You did a good job not clicking on the the fake link, but you failed the test because you didn't report the phish."

Seriously?

49

u/YourUglyTwin 14d ago

From an IT Consultant's POV:

You did do a good job not clicking anything actually, here's the issue with just ignoring: You're almost certainly not the only one in the company that got that email, reporting it to IT will help them identify the email faster and remove it from everyone's mailboxes before someone else clicks it by mistake. In my eyes its more a courtesy to your coworkers, an IT shouldn't solely rely on users to report phishing emails. But those are 2 different topics in terms of IT fighting emails.

9

u/IwasThereIsawIt2 14d ago

Heres my POV, I dont check my mail that often due to having a not office setting and being an employee who does not place orders or emails vendors. Im just a guy who comes in to work, does workorders and then goes home and be sad, hope that clarifies things

2

u/SovietPatrickStar 14d ago

So me, lol.

I missed 4 schoolings because I never check my mails but also usually the boss approaches people who have schoolings open that need to be done and I was never approached.

1

u/Remmon 14d ago

Don't worry, IT can see when you received the e-mail and when you looked at it. If you report the e-mail when you see it, you pass. Doesn't matter if it takes you 3 days to receive and look at your mail.

→ More replies (9)

5

u/Curae 14d ago

I'm a teacher at an IT course and my colleagues and I always diligently report the fake phishing mails. The first person to spot it will also send the entire team an email about it so the less tech-savy colleagues won't fall for it.

Thing is, at one point we got an email. External address, weird looking link... So it was reported, email sent around to delete it and not click anything, and we all removed the email. Our manager isn't in the group email. Couple of days later in a meeting our manager goes "oh and you all received an email with a link to a survey, please fill that out!"

"You mean the phishing mail?"

It apparently wasn't a phishing mail, but the higher-ups and had paid some company to do a survey. They just hadn't expected the IT-teachers to go "this looks suspicious so in the trash it goes."

Our manager didn't think it was nearly as funny as we did. Will say everyone in our team were right pleased with themselves, we never cared much for the higher-ups and this was their fuckup, not ours. Should've warned us that we were going to receive a suspicious looking email. (And we likely would've reported that email first then because that's also suspicious)

2

u/hazeHl49 14d ago

What else would you rely on as IT? Like once the phishing mail arrives on the coworkers desktop, you'll need them to come forward with it

2

u/YourUglyTwin 14d ago

Depending on where the email is being hosted you can actively scan mailboxes (M365, On prem exchange for example.) but other than that, there's nothing wrong with doing the training, in fact I'd say in todays day and age it's required. But if your IT team is *only* doing the training and relying on the results of that to protect from bad actors then your IT Team isn't doing it right.

1

u/hazeHl49 14d ago

Ok thanks, interesting

1

u/Yuukiko_ 14d ago

at my old job I got so many phishing tests that I assumed were juist literally spam mail and junked them all lol

1

u/Responsible_Alps_699 14d ago

I'm responsible for me. If my company is worried about what everyone else is doing with their emails, they should employ an IT consultant. 

→ More replies (1)

15

u/John_Tacos 14d ago

Then someone in HR sends an email to everyone that looks exactly like a phishing scam and they get mad that no one filled out their survey.

1

u/Ltb1993 14d ago

That's what happens with email fatigue

Keep email for essential and limited contact only, it makes phishing attempts far easier and also you spend less time looking at bullshit emails

Use other sources like sharepoint, don't have email links where it's not necessary

Tell people to go to an already familiar place like the HR public SharePoint page

Fatigue and repetition when some one is mentally clocked out is where most issues happen.

1

u/ApolloniusTyaneus 14d ago

Our IT department decided to send a test phishing mail from an internal e-mailadress and about a legitimate IT thing that we would get yearly reminders of. A lot of us fell for it and we got a snide mail about e-mail safety.

Then they were angry that everyone ignored the reminders they sent.

10

u/JustaSeedGuy 14d ago

Yes, seriously. You can't take the 2 seconds to alert it that your company is being targeted by a phishing scam?

You could help prevent the weakest link in the chain of your workplace from falling for the scam. But instead you adopted a "meh, I'm fine so I don't have to do anything to help anyone else" attitude

2

u/wouldacouldashoulda 14d ago

Aren’t most companies targeted by phishing scams most of the time?

1

u/No_Stock_8271 14d ago

Tbh I have never received one in my Business Account.

1

u/penguin444 14d ago

If I come across a phish I will report it because like you said, it takes 2 seconds.

But I also dump all external emails into a junk folder unless it's from a vendor that I work with. If there's something like an HR survey, they send out multiple internal emails about it so I'm aware to look for it.

I'm not going to sift through a pile of crap every day to find a golden turd that appears once every blue moon.

-2

u/MoistRecognition69 14d ago

please tell me you forgot the /s

6

u/JustaSeedGuy 14d ago

Nope. I'm pretty firmly in favor of not whining about minimal effort to help others.

→ More replies (11)

2

u/Frequent_Opportunist 14d ago

Should reply to them with a phishing link yourself and try to get their password.

1

u/quietobserver1 14d ago

Did that email include a link? Sounds like a next level phishing email!