[Moved to !iiiiiiitttttttttttt@programming.dev, check pinned post.] iiiiiiitttttttttttt.

919 readers

1 users here now

you know the computer thing is it plugged in?

Moved to !iiiiiiitttttttttttt@programming.dev.

founded 2 years ago

MODERATORS

Irelephant@lemm.ee

rindecision@lemmy.world

irelephant@lemmy.world

955

The devil did this. (infosec.pub)

submitted 3 months ago* (last edited 2 weeks ago) by Irelephant@lemm.ee to c/iiiiiiitttttttttttt@lemmy.world

121 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] leisesprecher@feddit.org 85 points 3 months ago (4 children)

I'm a software developer. A few years ago, we were all sent mail by a sketchy looking company that had our company's logo slapped onto the header in the sloppiest way possible and wanted us to click on a link to a "mandatory Cybersecurity training".

Obviously everyone ignored it. Which is exactly what you'd want people to do. Turns out, it was real and not a scam, just incompetence.

[–] expatriado@lemmy.world 59 points 3 months ago

i think you all completed the training before it started

[–] Canonical_Warlock@lemmy.dbzer0.com 18 points 3 months ago

A company I used to work for used paycom(dot)com for their HR software. So we would frequently get notifications from there for work stuff. One day I got an external work email telling me to click a link to a paycom(dot)net site to sign up for a raffle to win a free ipad. I thought that looked sketchy as fuck so I did a quick whois on the .net and .com sites. They were completely different and the .net site was basically entirely anonymised. So obviously at that point I was like "damn this phisher managed to get the .net domain for paycom. That's kind of impressive. I should let our IS guy know so he knows we're being targeted." So I shot off an email to our basically only IS guy and he responded by telling me that the email was legit and everyone in the company got it because the company was giving away an extra ipad they had. But he also said now that I pointed it out it was the sketchiest looking email he had seen in a while.

I honestly should have known better considering this is the same company where at one point a different IS person had sent me an email basically just saying "Your computer has a virus. Open this attachment to remove it." Turns out that was also legit and the guy who used my desk on first shift managed to get a virus somewhere but rather than comming down to fix it themselves IS just sent me an email with a script to run.

[–] Dagwood222@lemm.ee 12 points 3 months ago

Someone once said that people don't hate computers, they hate the idiots who program computers.

[–] superkret@feddit.org 5 points 3 months ago

Genius. The people who click on the link to the training are exactly the people who need the training.