Can’t make the wrong people look bad.
If IT did the phishing tests nobody would stand a chance lol
this post was submitted on 22 Jul 2026
451 points (99.3% liked)
Dull Men's Club
4469 readers
63 users here now
An unofficial chapter of the popular Dull Men's Club.
1. Relevant commentary on your own dull life. Posts should be about your own dull, lived experience. This is our most important rule. Direct questions, random thoughts, comment baiting, advice seeking, many uses of "discuss" rarely comply with this rule.
2. Original, Fresh, Meaningful Content.
3. Avoid repetitive topics.
4. This is not a search engine
Use a search engine, a tradesperson, Reddit, friends, a specialist Facebook group, apps, Wikipedia, an AI chat, a reverse image search etc. to answer simple questions or identify objects. Also see rule 1, “comment baiting”.
There are a number of content specific communities with subject matter experts who can help you.
Some other communities to consider before posting:
5. Keep it dull. If it puts us to sleep, it’s on the right track. Examples of likely not dull: jokes, gross stuff (including toes), politics, religion, royalty, illness or injury, killing things for fun, or promotional content. Feel free to post these elsewhere.
6. No hate speech, sexism, or bullying No sexism, hate speech, degrading or excessively foul language, or other harmful language. No othering or dehumanizing of anyone or negativity towards any gender identity.
7. Proofread before posting. Use good grammar and punctuation. Avoid useless phrases. Some examples: - starting a post with "So" - starting a post with pointless phrases, like "I hope this is allowed" or “this is my first post” Only share good quality, cropped images. Do not share screenshots of images; share the original image.
.
founded 2 years ago
MODERATORS
I'd always pass because I never look at any of my emails. Checkmate, IT department
I've setup a filter based on email headers that include 'Phishing_Training' lol, can't be asked
Work in IT and my old cyber security architect would always try to get us. He did some great tricks and got a few salesmen. Never the engineers. Then they did similar tests for clients, they got hammered bad.
I already know the way to get me to click a phishing link is to send me 5 emails from the same company all 100% legit but have the unsubscribe link be the phishing link.
I would fall for that because I'm unsubscribing from companies emails all the time.
Even IT people click on random unsubscribes? I've learned that the hard way in my teens, that you only get more spam then. Only unsub from sites you know you have an account on.
Random? No I think my original message misses a point.
I don't look at ads. I don't respond to messages I don't answer phone calls from anyone besides my wife.
I'm so overly cautious and uninterested I could possibly miss a call telling me my parents are dying.
I've been in IT so long that everything these days is spam to me, I'm always looking for a way to disable every notification and block every call/message.
The last time I had a real social media message that I cared about was back when MSN messenger existed.. So at least 18+ years ago
Now don't get me wrong, I'm a ridiculous human being.. I am a big fat loudmouth but even as far back as Bebo then Myspace then Facebook I've been more interested in getting attention face to face.
Now I've gone on and on.. That's because I'm in my late 30s and I hate my job and I've drank too much alcohol.
Good luck to you and I wish you well
load more comments
(2 replies)
That reminds me of a recent situation.
As someone working in software development, we are required to take part in the security trainings, the usual "don't open things from people you don't know" and "verify that a link is 'known' even if you get something from a person you do know", yada yada. You know the drill.
Recently, I got an email from our Boss saying something about "Here is something that you need to click on so that you are being authorised to do this stuff". Here was my thought process:
- This is from the boss's Email. But this cannot be trusted since it can be faked
- This is about something we/our software can do. But I don't know why I have to do this, since this isn't really something I am part of or even know anything about
- It looks like a legit email
- I hovered over the link, which had some weird target location that I didn't know
So, as a good boy, I opened a new Support ticket on IT with a screenshot of the link and said: "Got an email that tells me that I should open this link, but I don't know this link. What should I do?". The response was simple: Mark as Phishing and delete the Mail, done.
2 hours later, I got a message on Teams from IT which said: "Well, apparently that mail you marked as phishing was actually from us (was legit)". Great. Mail is gone now, don't know where Outlook put it, and frankly, I don't care.
If you train your people to "question everything" and not open links they don't know where they are going, then don't use some idiotic "middle man" or referer links in your official emails either. Even better, announce things before sending something out. I don't know how many emails I have gotten over the years where I would question the content and ignore it only for it to be something more important that nobody felt the need to announce first that something like this is coming our way.
I had a previous company send out a company wide announcement from a sketchy sender with a weird file attachment(apparently it's a voice mail file format), and the email was essentially listen to this attachment with no signature or anything else. They had to send out a second email explaining the suspicious email is actually real. Companies seem intent on ensuring there is minimal difference between phishing and legitimate email.
Honestly, this is preferable, and pretty funny. IT can always resend invites to tools and services. I'd rather send 1000 of those than have to lock someone out and have to talk to a human.
Purple link, lol
Devious
Me and some coworkers got yelled for reporting the phishing attempt. And then still clicking on the links. The halfass made up sites it took you to were worth it. It’s wouldnt take you to some site saying you failed. It would be like a lunch menu for some made up place. It was great.
They got me with one a few weeks ago :(
I fell for a fucking obvious pathetic text when I moved to a new country because my bullshit immune system had not adapted to the new landscape.
It's FUN to turn over all of your bank cards after a month!
Oh dang. I just had to watch an IT security/phishing training video
By the way, did you already donate for the annual November nothing day celebration? Click this 🔗 to donate, everyone is doing it!
view more: next ›