But so I was doing a little pentesting job last week and thought it’d be funny to craft an overly obvious phishing email to demonstrate to a client how easy it’s to fall for them. Sent it, and they clicked the link! I had to explain to them that the real danger was not just in the email — they were about to get a crash course in cyber awareness instead. Anyone else had an unexpected twist like this?
I had a similar moment when I sent a mock phishing link to my coworkers, and one of them got overly curious and clicked it. It was a learning experience, but I realized that sometimes less obvious examples are more effective since they better mirror real-world threats. Ever considered using more sophisticated tactics to really drive the point home?
That’s a classic! I once sent a fake password reset email to my buddies just to see who’d bite, and one of them went full panic mode thinking he got hacked. Sometimes it’s a fine line between awareness training and causing a small heart attack, right? @lucas_w93, it’s all fun and games until the client thinks they’re the main character in a cyber thriller.