Caught my own phishing test at a Starbucks in Dallas

I was sitting in a Starbucks in Dallas last Tuesday running a phishing simulation for my company. I sent the fake email to 200 employees and then immediately clicked a link in my own personal email without thinking. It was one of those "your package is delayed" scams that I always warn people about. How do you guys keep yourself from getting sloppy with personal accounts after running so many tests?

2 comments

2 Comments

graytorres14d ago

Man 200 employees though. I gotta say I don't really buy the whole "I got sloppy" thing. You run these tests for a living so you know better. Feels like you just clicked it out of habit and now you're making excuses. Pay more attention, it's that simple.

stella_lee14d ago

How do you keep your personal habits from bleeding into your work brain? I started keeping a separate browser for my personal stuff with no saved passwords and no autofill, so my muscle memory for clicking fast doesn't work outside of my test environment. It's not perfect but it's cut down my dumb clicks by a lot.