My Employer Tricks Me With “Simulated Phishing”
Sometime last year, my employer decided to implement a “simulated phishing” campaign which involved sending out “fake” emails to all employees in order to try to trick them into clicking a malicious link, or opening a malicious attachment, or giving away their login credentials – all in the name of “educating” us. Instead of educating it me, it drove me into a state of paranoia and mistrust.
A couple of weeks later, I received my first email that was obviously a scam. “Dear university employees, It has come to my attention that u have not paid your employment fees. Please make payment immediately by click the following link. If u do not make payment today, your contract will be terminated. Yours Sincerely, Vice President University”. Okay, so that was obviously fake, but I reported the email anyway as we were trained to do, and the IT department congratulated me for spotting their first fake email. Success! At first, this all felt more like a bit of a game than anything else.
Another email came a few weeks later, this time, a bit more personalised. “Hi Stephen, I thought you might be interested in this link: ‘Three ways for university employees to get a BIG promotion’. It’s a really good read! Cheers, Peter”. So, hovering my mouse over the link as we were taught, it said something like, fake-link-do-not-click”. Again, I reported the email and yes, it was a simulated phishing attack.
But then, the IT team decided that they were being a bit too easy on us and stepped up their game convincing me to enter my login details. When I did, I was met with, “Haha, we tricked you! Fortunately, this was just a test as part of our simulated phishing awareness campaign”. At this point, I started getting a bit upset. I mean, they were sending out fairly realistic looking emails that could very much have been true, but then almost making us feel a bit foolish when we clicked on them.
Then a few more weeks later, I was sent another email that was obviously fake threatening to suspend my university account if I didn’t take action. Unfortunately for me, the “fake” email wasn’t actually fake and my university account was suspended.
I think that’s the inevitable consequence of these so-called “simulate phishing campaigns”. Exposing people to a barrage of fake phishing attacks clearly has unintended consequences. They make otherwise competent and dedicated employees feel embarrassed and perhaps even ostracised. They make us feel potentially paranoid, and suffer from ‘analysis paralysis’ where even when we receive a legitimate email, we don’t take action due to the fear that we might fall victim to another one of these fake phishing scams. All this campaign has done, I think, is have a negative effect on employee morale, and has created a culture of mistrust. Is that what the university wanted? Perhaps it was.
MUSIC
Melancholia by Godmode
#simulation #phishing #phishingattack
-
8:02
Daily Insight
6 days agoIs the “Gender Pain Gap” Made Up?
1481 -
10:23
America Uncovered
21 hours agoThe IRS Has Gone On The Attack. And The Poor Still Suffer
26.6K14 -
30:43
TheTapeLibrary
14 hours ago $0.52 earnedThe TRUE Haunting of The Enfield Poltergeist (FULL PARANORMAL HORROR DOCUMENTARY)
35.2K30 -
4:45
Gamazda
1 day ago $3.36 earnedDragonForce - Through the Fire and Flames (Piano)
52.1K79 -
24:56
MYLUNCHBREAK CHANNEL PAGE
19 hours agoFinding Old World Pyramids?
44.6K54 -
16:20
Guns & Gadgets 2nd Amendment News
20 hours agoClarence Thomas DESTROYS Opinion Of Today's Anti-2A Ruling!.mp4
50K35 -
26:42
Degenerate Plays
18 hours ago $2.51 earnedHeavenly Bodies And Beautiful Assets - Stellar Blade : Part 1
47.2K5 -
7:03
Chris Jericho
1 day agoTalk Is Jericho Highlight: Alien Encounters With Mitch Horowitz
28.9K3 -
3:01:45
SNEAKO
14 hours agoSUMMER IS HERE… SPECIAL GUEST
106K62 -
1:07:00
Russell Brand
2 days ago“Something BIG is about to happen” - EXCLUSIVE Alex Jones Interview on INFOWARS shut down - 391
483K2.58K