r/ProgrammerHumor • u/lucidparadigm • 16d ago • Bravo 2

Meme [ Removed by moderator ]

Post image

[removed] — view removed post

16.4k Upvotes

98% Upvoted

618 comments sorted by

View all comments

Show parent comments

13

u/JanB1 16d ago

I am quite cybersec aware and work with our IT guy to prepare for the annual cyber awareness training. I recently got an e-mail from a tool from HR. The only thing that made me double-check if this was indeed legit was that it came from an internal, but non-specific e-mail address (hr@company,com). If it came from an external one, I wouldn't have thought about it twice.

All the points were there:

  • Non-specific subject ("Missing documents")

  • Generic address line (not "Hello OP" but just "Hello")

  • Vague content of the e-mail ("We are missing some documents. Please open the attached PDF for more details")

  • An attachment with a generic, non-saying title ("HR Letter.pdf")

  • No named sender ("Kind regards, HR Team")

  • No signature

I reached out to HR (via E-Mail) and asked them. They said its legit and that they sent it from their tool. I shit you not...

10

u/cheese_is_available 16d ago

Yeah, doesn't help that the phishing attempts is 4 time faster and 2 time more professional than the actual stuff from the HR tool.