News for hackers. Stuff that matters.

A comment on Kobold letters: Why HTML emails are a risk to your organization. Parent comment

Re:Kobold letters: Why HTML emails are a risk to your organi... by Finnucane on Thursday April 04, 2024 @11:54AM (#39932013)
Now when I see a phish, I check to see where it is coming from. 97 percent of the time, it is a test. We're getting these tests often enough that I just assume that's what it is.
[ Parent | on HN ]
Re:Kobold letters: Why HTML emails are a risk to your organi... by imzadi on Thursday April 04, 2024 @12:17PM (#39932393)
Which is fine, actually. If you see it and think "oh, IT is at it again" and delete it or report it, mission accomplished, because there is still that 3/100 chance it is real.
[ Parent | on HN ]
Re:Kobold letters: Why HTML emails are a risk to your organi... by Kinrany on Thursday April 04, 2024 @02:07PM (#39933926)
It only works on fake fishing.
[ Parent | on HN ]
Re:Kobold letters: Why HTML emails are a risk to your organi... by imzadi on Thursday April 04, 2024 @04:47PM (#39935604)
So when you look at the sender of a suspicious email and it's not the phish sim service you just go ahead and open it? That doesn't sound like a problem with the phish sim.
[ Parent | on HN ]
Re:Kobold letters: Why HTML emails are a risk to your organi... by Kinrany on Thursday April 04, 2024 @06:52PM (#39936789)
It's certainly a problem with the phish sim if you're trying to teach people not to open random links and instead you're teaching people not to open phish sim emails.

It fact, it can be actively harmful if it creates a false sense of security.

[ Parent | on HN ]