Have you seen a message like this work?

I'm asking because support agents sometimes receive messages from people who offer consulting services, often related to website security. Some of them are automated or not useful, but to a layperson they look similar to your template above.

I could imagine a scenario where a support agent dismisses the above message as spam.

I guess if you can find a manager of some sort within the org would be your best bet.

To me, that wording looks like a scam attempt or a malware threat, and most first-level techs I've worked with would reject it out of hand for that reason.

I suspect this would just get ignored as it would sound potentially like a phishing attempt. They'll have it drummed into them that there is no reason for such technical matters to be discussed in that channel and that they should politely brush it off.

Such training will likely be stepped up, making this sort of message more likely to be ignored, after the events at Twitter and Garmin recently which both seem to have stemmed from the phishing variety of "human factors" engineering on the part of the attackers.

I just tell them their software is broken on X browser, then wait till it gets escalated high enough for someone to care about the technical details.