News for hackers. Stuff that matters.
Re:Want to piss off your IT department? Are the links not ma... by jcims on Friday September 19, 2025 @07:07AM (#45300259)
Outlook has a rule filter for header content.

Just saying I haven't failed a phishing test in ~10 years.

Re:Want to piss off your IT department? Are the links not ma... by sciencejerk on Friday September 19, 2025 @08:47AM (#45301074)
Mind sharing your filter rules? KnowBe4 uses X-PHISHTEST header and I think I saw Proofpoint using something similiar a few years back
Re:Want to piss off your IT department? Are the links not ma... by jcims on Friday September 19, 2025 @11:07AM (#45302477)
Straight from the source: https://help.proofpoint.com/Proofpoint_Essentials/Security_A... xD

The vast majority of security controls are designed for the careless and the clueless.

Re:Want to piss off your IT department? Are the links not ma... by jsmith99 on Friday September 19, 2025 @10:12AM (#45301893)
My IT department use the official Microsoft phishing test. The emails arrive in inbox with 0 headers. (There's also a helpful Microsoft page of all the dodgy sounding domains they've registered for this.)
Re:Want to piss off your IT department? Are the links not ma... by monocularvision on Friday September 19, 2025 @03:09PM (#45305252)
I did this and it worked for a few months before word got to security who then forced everyone to remove the rule.
Re:Want to piss off your IT department? Are the links not ma... by prmoustache on Friday September 19, 2025 @04:02PM (#45305877)
I just don't check my emails anymore. If it is important, people will complain on teams that nobody answer with some sort of urgency and then I'll look for it specifically.