109

Reporting security incidents (feddit.org)

submitted 2 months ago by cron@feddit.org to c/cybersecuritymemes@lemmy.world

10 comments fedilink hide all child comments

Love it when someone falls for phishing, gives away their login, and just… says nothing. Really helpful.

top 10 comments

sorted by: hot top controversial new old

[-] Brewchin@lemmy.world 16 points 2 months ago

I've been told off for reporting phishing attempts:

Real: "Why did you receive it?!" Dunno mate. Woke up this morning and decided that I wanted it. We all have total control over what email we get sent, right?
Fake: "This Isn't a phishing attempt! What's wrong with you?!" The From domain, the link domain both look suspicious, and the SMTP headers are dodgy AF. Should I have FAFO and then reported it after the fact?
Test: "Why are you reporting this? It's the test phish we commissioned!" You do realise that you're meant to do some work, right? Sure, you paid someone to safely phish staff, but that also means following up on it's effects.

Damned if you do, damned if you don't. And manglement gaze at their navels wondering why incidents don't get reported... 😬

[-] RowRowRowYourBot@sh.itjust.works 12 points 2 months ago

Remember that many know nothing about security and might not realize that pop up is a real problem

[-] cron@feddit.org 10 points 2 months ago

True. Additionally, some might be embarrassed or too afraid to report an incident.

[-] RowRowRowYourBot@sh.itjust.works 4 points 2 months ago

True but I believe that ignorance is a much more common problem.

Source: not an IT person and ignorant of stuff

[-] a4ng3l@lemmy.world 2 points 2 months ago

On don’t give a shit bc they are external employees and have no interest in the company… why bother?

[-] Godnroc@lemmy.world 7 points 2 months ago

"External Employees" sounds like a term that was invented purely to avoid paying people adequate wages or benefits.

[-] smeg@feddit.uk 4 points 2 months ago

Contractors tend to get way higher pay in exchange for a lack of benefits like guaranteed employment. I'd be surprised if security gives them the same level of trust as normal employees though.