it is straight up depressing how often that stuff works.
one of my most successful phishing campaigns was a one sentence email, with a one letter signature sent to all c-levels EXCEPT the ciso at an org, one of the c-levels fwd to the ciso because they noticed he wasnt on the thread. bananas.
I got one of those this week on day two of a new job. The person it was supposed to be from was 20 feet from me across the room. I guess this must work sometimes otherwise they wouldn’t do it but I can’t imagine why it works.
Comments
one of my most successful phishing campaigns was a one sentence email, with a one letter signature sent to all c-levels EXCEPT the ciso at an org, one of the c-levels fwd to the ciso because they noticed he wasnt on the thread. bananas.