Gitlab phished its own work-from-home staff, and 1 in 5 fell for it

Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by dyslexit on Saturday May 23, 2020 @01:27PM (#23284742)

The article says 17 employees opened the link, and 10 of those types in their credentials. The 20% the headline is talking about are those 10, not the 7 that didn't do anything.

[ Parent | on HN ]

Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by paholg on Saturday May 23, 2020 @05:53PM (#23286861)

They did a test like this at a company I worked at. I ended up entering fake credentials because the thing seemed so shady, I was curious what its deal was.

[ Parent | on HN ]

Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by mcny on Saturday May 23, 2020 @06:57PM (#23287355)

I opened the email and I forwarded the email to abuse at corporate domain just like the corporate website says and my manager still got an email saying I failed the test.

Maybe because the tracking pixel remote image loaded? I remember reading an article where people sent an email to Apple and it got passed around within Apple and iirc either Steve Jobs or someone who reports directly to Steve Jobs opened the email not knowing that they were sending out a makeshift read receipt every time they opened the email.

[ Parent | on HN ]

Re:Gitlab phished its own work-from-home staff, and 1 in 5 f... by yosito on Saturday May 23, 2020 @08:40PM (#23288036)

Hi Gitlab! I'm available for hire if you need a replacement.

[ Parent | on HN ]