If the fake phishing emails can be caught by my very rudimentary filter they weren't particularly good anyway. Besides, I still have to look at those emails and report them, otherwise my IT still counts it as a strike against me. Win-win. IT continues to keep me on my toes and I don't have to take another 30min training course because I ignored an email for a day or two.

I've been meaning to read Don Quixote and this is the tipping point. I want to make quixotic references.

Oh man y'all remember the actual phishing campaign of messages from customer-service@bankofarnerica. com?

I know this is a leap, but for some reason reading this made me want to buy a domain like virus.porn and make it the most wholesome, lemmy community on the planet.

An actual email sent by my company. (not representative of their usual)

A company I was in a few jobs back had several layers of IT department, there was the local studio department that handled our everyday stuff and a "head office" somewhere far away that set policy and handed out budget and whatnot.

One day "head office" IT decided it was a good idea to send out some fake phishing emails to "test" us. They didn't tell the local IT department about it, I guess they were also being "tested". My manager received one and only recognized it as a phishing attempt after he'd clicked just one too many things for it to feel safe to ignore. So he yanked the power on his computer and contacted the local IT department, as is protocol when something potentially dangerous just happened.

The local network went into lockdown while local IT tried to figure out if something actually dangerous had happened. It cost the studio as a whole several hours of work time, which for a studio our size translated to an obscene dollar cost. Nobody on our side of things did anything wrong, even that one extra "dangerous" click my manager did wasn't something he could be blamed for - head office had crafted the fake phishing attempt well and his reaction to it would have prevented damage had it been real.

Head office never tried a stunt like that again.

So what do you do when you get an actual phishing mail that doesn't use that TLD?

I've also never fallen for any of the phising emails the IT department sends to test me, my secret is almost never checking my email

Neither is your future if your wife maintains such easily exploited vulnerabilities.

Blink 8 times if you're in danger

Hey Barb, I forgot my keys, please leave the garage open. Thanks, Jeff.

Boom, stole the faculty coffee maker.