Loading…
32
Our office got hit by a phishing email on Tuesday, and 4 people clicked it
IT sent a fake invoice link at 9am and by lunch 4 people had typed in their passwords. Turns out the whole thing was a drill, but now I'm wondering how many real ones slip through when nobody's watching. Anyone else's workplace run tests like this?
1 comments
Log in to join the discussion
Log In1 Comment
holly_henderson8617d ago
Gotta push back on the idea that these drills are pointless or just ticking boxes. Think about it this way, that click rate is exactly why companies keep running them, because the one guy who almost fell for it last time is the one who stops and checks the sender next time. Four out of how many employees? If it's 4 out of 40 that's bad, but if it's 4 out of 400 you're actually doing okay and the drill just proved it. The folks who complain loudest about fake tests are usually the same ones who'd wire money to a prince overseas.
3