Sometimes I wonder whether all this “security awareness training” has any effect at all.

  • Windex007@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    2 days ago

    About 9 years ago I wrote a script that looked for links to domains registered to wombat (the company that most companies seem to use for phishing simulation) and would autoreport and delete them. So just never saw them.

    Still had to do the training. Every six months.

    • Nasan@sopuli.xyz
      link
      fedilink
      arrow-up
      2
      ·
      2 days ago

      One of my former managers had this habit of setting up email rules for known phishing simulation domains whenever he started somewhere new.

      Microsoft domains listed in a table here for anyone else unfortunate enough to have to use their products within your org.