Got my first real phishing test email at work last week and I actually caught it

We had a company-wide training about phishing maybe six months ago, and I thought I got it. But last Tuesday, I got an email that looked exactly like it was from our IT help desk, asking me to click a link to confirm my account. The address was off by one letter, and the link hover text showed a weird URL. I reported it, and my boss said I was one of only three people in our whole office of 50 who didn't click. It felt good, like a little win. It made me slow down and actually look at every email now, not just skim. Has anyone else had a moment where a training finally clicked for them in a real situation?

3 comments

3 Comments

mary7761mo ago

Good catch, right? That feeling when the training actually works is the best.

nelson.nancy1mo ago

Yeah that "training actually works" feeling @mary776 is so real. Was it a specific drill you've been doing that finally clicked, or just everything coming together in a game?

xenagarcia1mo ago

Training is just a grind, never feels like it works.