Phishing

My 26 year old works for Northrop Grumman. He got an email asking him to click on a link and select a size if he wanted a Northrop jacket.

He reported the email to corporate IT as a Phishing attempt. The response was that it wasn’t a malware, but a genuine corporate outreach.

I got the above narrative from my son, when I saw him wearing his new jacket.

…………………………………………

Dan, who now has his own law firm, once told me that he got an email asking him to click on a link if he wanted a dozen free donuts, when he used to work at a Washington DC law firm.

According to Dan, he wanted to impress his colleagues by bringing in a dozen donuts, to his office. I think his was kidding about impressing his colleagues, but click on the link he did.

There was an immediate email response stating that the previous email was a Phishing exercise conducted by his (then) employer. Dan had violated corporate policy by clicking on the link in the previous email.

Guess who got to take mandatory corporate security training?