• tiramichu@sh.itjust.works
    0·
    1 month ago

    A previous (huge) company of mine sent out a lot of phishing test emails, some of which were pretty convincing.

    As developers, we quickly discovered that all the emails had a metadata header in them which identified them as a phishing test, so we set up a filter for it so every email since is clearly coded with a bright red “Phishing test!” label.

    • Honytawk@feddit.nl
      1·
      1 month ago

      Did it also label real phishing mails?

      Because those tests are send out for a reason. And in my experience, developers are some of the worst at cybersecurity.