Shoutout to the sysadmin who caught my phishing test before I could send it

After I spent 90 minutes crafting a fake vendor email that looked legit, he flagged it in 3 seconds flat and asked me "you really think we're that dumb?" - has anyone else had their own department call them out like that?

2 comments

2 Comments

keith_singh21d ago

My IT team did the exact same thing to me last year. I spent two days building a fake invoice from a vendor we actually used and customized the whole thing with real logos and email signatures. Our security guy flagged it in under a minute and fired back "nice try, did you use the same template from last quarter's test?" I was honestly more impressed than annoyed.

umab8619d ago

Three seconds is reasonable since your IT team likely taught that vendor phish bait in the first place.