<![CDATA[the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work!]]>the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! [Click here] to claim your gift!”)

]]>https://board.circlewithadot.net/topic/387e42bb-f8f8-4157-b0f6-f433ba8c2e50/the-infosec-people-at-my-work-are-rioting-because-the-distant-corporate-overlord-sent-an-email-that-scores-10-10-on-the-phishing-scale-we-want-to-give-you-a-present-to-thank-you-for-all-your-hard-workRSS for NodeFri, 05 Jun 2026 17:58:30 GMTThu, 28 May 2026 09:28:04 GMT60<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:54:16 GMT]]>@0xabad1dea

The real scary email isnt some dumb phishing. The scary is straight forward.

"We are a operator. We would like for you to run this script on your work machine. If you do, we'll pay you $1000 in your choice of crypto. If they pay the ransom, we pay you 10%."

That weaponizes ransomware so that everybody is a potential . And given these days with so much job abuse due to terrible conditions, sending a few of these emails are sure to hit someone disgruntled enough to say fuckit.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/crankylinuxuser/statuses/116652301115258770https://board.circlewithadot.net/post/https://infosec.exchange/users/crankylinuxuser/statuses/116652301115258770Thu, 28 May 2026 12:54:16 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:45:33 GMT]]>@0xabad1dea

can't be worse then that recent thing in Korea where the ad campaign seemed to praise a brutal crackdown by the gov't that killed students

thank god for it isn't as bad as it can be ?
I guess
🙂

]]>https://board.circlewithadot.net/post/https://mas.to/users/failedLyndonLaRouchite/statuses/116652266842933280https://board.circlewithadot.net/post/https://mas.to/users/failedLyndonLaRouchite/statuses/116652266842933280Thu, 28 May 2026 12:45:33 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:36:44 GMT]]>@mo @fishidwardrobe @0xabad1dea At least not that level. Move directly to Advanced class.

]]>https://board.circlewithadot.net/post/https://ohai.social/users/TerryBTwo/statuses/116652232182229697https://board.circlewithadot.net/post/https://ohai.social/users/TerryBTwo/statuses/116652232182229697Thu, 28 May 2026 12:36:44 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:35:39 GMT]]>@david_chisnall @0xabad1dea I just set up an Outlook rule (rather, a battery of rules) to funnel emails not addresses to me individually and from comms@initech.example etc into a subfolder called "Corporate" I only look at every couple of days.

]]>https://board.circlewithadot.net/post/https://beige.party/users/jackeric/statuses/116652227944255111https://board.circlewithadot.net/post/https://beige.party/users/jackeric/statuses/116652227944255111Thu, 28 May 2026 12:35:39 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:35:34 GMT]]>@0xabad1dea when I started at my current employer, I discovered they’ve outsourced parts of their onboarding process to a third party. Many of the emails I got from the third party resembled phishing attempts, such that I marked several as phishing tests.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/ashteranic/statuses/116652227584162119https://board.circlewithadot.net/post/https://hachyderm.io/users/ashteranic/statuses/116652227584162119Thu, 28 May 2026 12:35:34 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:28:40 GMT]]>@0xabad1dea I had two different employees get scammed out of $500 because they thought I emergency emailed them in the middle of a meeting that I needed $500 in gift cards from Walmart and to just send me the numbers off the cards in email-not sending to my actual email of course.
I was APPALLED any employee thought I would ask them for money. I mean, I would not even ask you for a quarter to get a bottle of water from a vending machine. I had to announce at a meeting I will never ask for $$

]]>https://board.circlewithadot.net/post/https://mas.to/users/Thoreau/statuses/116652200433551878https://board.circlewithadot.net/post/https://mas.to/users/Thoreau/statuses/116652200433551878Thu, 28 May 2026 12:28:40 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:23:11 GMT]]>@mo @0xabad1dea true, but we were all told (eventually) that we had to click on the suspicious link, which is kind of the opposite

]]>https://board.circlewithadot.net/post/https://mastodon.me.uk/users/fishidwardrobe/statuses/116652178870164727https://board.circlewithadot.net/post/https://mastodon.me.uk/users/fishidwardrobe/statuses/116652178870164727Thu, 28 May 2026 12:23:11 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 12:10:35 GMT]]>@0xabad1dea remind me, when i changed my contract, the hr ask some administratives pieces which i give to her
Some time later, i receive an email at my personnal email adress from someone i do not know, asking the same pieces
In my head, it was phishing, but no, the hr Just not send the pieces to him (i learn that later) ><

]]>https://board.circlewithadot.net/post/https://piaille.fr/users/martouf/statuses/116652129373433121https://board.circlewithadot.net/post/https://piaille.fr/users/martouf/statuses/116652129373433121Thu, 28 May 2026 12:10:35 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:58:59 GMT]]>@0xabad1dea My bank did something like this, even asking me to log in to my account using the button in the email. Customer support didn't see the problem as they "could confirm" the email in my inbox was real. More or less wrote their head lawyer that I thought they were complicit in identity theft. Don't think I ever got a reply, but their policy changed after that.

]]>https://board.circlewithadot.net/post/https://sciences.social/users/economistatwork/statuses/116652083729526256https://board.circlewithadot.net/post/https://sciences.social/users/economistatwork/statuses/116652083729526256Thu, 28 May 2026 11:58:59 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:55:51 GMT]]>@bremner I have in fact said to my coworkers "Emails from the corporate overlord aren't real until my manager asks why I haven't responded yet"

[to be clear, we were a small company that was acquired by a much bigger company in another country]

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116652071405829116https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116652071405829116Thu, 28 May 2026 11:55:51 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:52:46 GMT]]>@0xabad1dea One of my petty pleasures is marking all of the emails from our infosec contractor as phishing attempts. They start with things like "You have been assigned" and I'm like, I don't work for you, red flag, red flag! Also they have a history of "fake phishing" people in order to chide them, so they are literally known bad actors. Welp, that's gonna be my story when they finally track down my boss and complain that I've been ignoring them for 6 years.

]]>https://board.circlewithadot.net/post/https://mathstodon.xyz/users/bremner/statuses/116652059302674768https://board.circlewithadot.net/post/https://mathstodon.xyz/users/bremner/statuses/116652059302674768Thu, 28 May 2026 11:52:46 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:30:26 GMT]]>@xinit @0xabad1dea A friend working at the occupational health and safety clinic, a vegetarian, mind you, got a basket of Italian delicacies, including prosciutto, every year.

]]>https://board.circlewithadot.net/post/https://todon.eu/users/rhelune/statuses/116651971501191904https://board.circlewithadot.net/post/https://todon.eu/users/rhelune/statuses/116651971501191904Thu, 28 May 2026 11:30:26 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:27:47 GMT]]>@fishidwardrobe that's actually a good idea lol
if you don't click on suspicious links, you probably don't need phishing training

@0xabad1dea

]]>https://board.circlewithadot.net/post/https://mastodon.ml/users/mo/statuses/116651961063022786https://board.circlewithadot.net/post/https://mastodon.ml/users/mo/statuses/116651961063022786Thu, 28 May 2026 11:27:47 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:21:47 GMT]]>@fishidwardrobe @0xabad1dea yes, mine too. I reported it and, because we do have a really good internal person that is responsible for this sort of thing, now we always get an email first saying on how you will get this dodgy-looking thing but it’s real.

]]>https://board.circlewithadot.net/post/https://mastodon.me.uk/users/clare_hooley/statuses/116651937465792052https://board.circlewithadot.net/post/https://mastodon.me.uk/users/clare_hooley/statuses/116651937465792052Thu, 28 May 2026 11:21:47 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:17:29 GMT]]>@0xabad1dea I thought infosec ppl had all forgotten how to riot, this is very hopeful

]]>https://board.circlewithadot.net/post/https://bayes.club/users/wronglang/statuses/116651920569843127https://board.circlewithadot.net/post/https://bayes.club/users/wronglang/statuses/116651920569843127Thu, 28 May 2026 11:17:29 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:16:51 GMT]]>@RogerBW @0xabad1dea

i send valid links to colleagues throguh https://shadify.link/

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/utf_7/statuses/116651918048588109https://board.circlewithadot.net/post/https://mastodon.social/users/utf_7/statuses/116651918048588109Thu, 28 May 2026 11:16:51 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:13:43 GMT]]>@jwdt @0xabad1dea small business tax guy deciding to modernize and calling his secure file drop through some SaaS provider securefile and that being the subdomain on it. Phish alarms blaring, but we got the domain from him in conversation and he’s normal so it just doesn’t register to him that it sounds very bad.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/c0dec0dec0de/statuses/116651905763770104https://board.circlewithadot.net/post/https://hachyderm.io/users/c0dec0dec0de/statuses/116651905763770104Thu, 28 May 2026 11:13:43 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:07:54 GMT]]>@0xabad1dea ohhh, I get it. "the gift is free" is just lossy transmission, the full meaning was
"the gift is you can be free advertising for the company". That's awesome, double plus good, really.

]]>https://board.circlewithadot.net/post/https://23.social/users/Tom_ofB/statuses/116651882851712845https://board.circlewithadot.net/post/https://23.social/users/Tom_ofB/statuses/116651882851712845Thu, 28 May 2026 11:07:54 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:05:51 GMT]]>@Tom_ofB I'm pretty sure it's just corporate logo swag distribution being framed as "a thank-you gift"

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116651874785074019https://board.circlewithadot.net/post/https://infosec.exchange/users/0xabad1dea/statuses/116651874785074019Thu, 28 May 2026 11:05:51 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:05:21 GMT]]>@0xabad1dea This pisses me off so much!
Not (for me) internal corporate, but marketing depts. Notably Barclays sending “Dear customer click here for your wonderful offer” emails.

]]>https://board.circlewithadot.net/post/https://ohai.social/users/TerryBTwo/statuses/116651872831120720https://board.circlewithadot.net/post/https://ohai.social/users/TerryBTwo/statuses/116651872831120720Thu, 28 May 2026 11:05:21 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:04:23 GMT]]>@0xabad1dea I mean, it must be a test, right? A free gift, from corpo? C'mon.

]]>https://board.circlewithadot.net/post/https://23.social/users/Tom_ofB/statuses/116651869047921552https://board.circlewithadot.net/post/https://23.social/users/Tom_ofB/statuses/116651869047921552Thu, 28 May 2026 11:04:23 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 11:03:14 GMT]]>@s0 @0xabad1dea I had the same experience multiple years in a row.
Vague "click now to get started with your experience" button in an external email that wasn't white listed. Turned out to be cyber security training.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/KatieLoves2Read/statuses/116651864504637575https://board.circlewithadot.net/post/https://mastodon.social/users/KatieLoves2Read/statuses/116651864504637575Thu, 28 May 2026 11:03:14 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 10:52:54 GMT]]>@pmb00cs @0xabad1dea Love your IT department for that little "fuck u" Mr CEO email

]]>https://board.circlewithadot.net/post/https://sigmoid.social/users/drgroftehauge/statuses/116651823872433293https://board.circlewithadot.net/post/https://sigmoid.social/users/drgroftehauge/statuses/116651823872433293Thu, 28 May 2026 10:52:54 GMT<![CDATA[Reply to the infosec people at my work are rioting because the Distant Corporate Overlord sent an email that scores 10/10 on the phishing scale (“We want to give you a present to thank you for all your hard work! on Thu, 28 May 2026 10:39:03 GMT]]>@lupinia @0xabad1dea When so much “legal, legitimate” business is basically a scam, how can anyone tell?

]]>https://board.circlewithadot.net/post/https://twit.social/users/MisuseCase/statuses/116651769454961953https://board.circlewithadot.net/post/https://twit.social/users/MisuseCase/statuses/116651769454961953Thu, 28 May 2026 10:39:03 GMT