Corporate Infosec sends a phishing test email, I click, and somehow I'm the asshole because "[I] failed the test; had this been real it would have destroyed the company network"? If me clicking can destroy the network, I'm not the one in this conversation who sucks at their job.
123
775
132
4,755
But they didn't even get phished! Clicking the link is not "getting phished". It's how you check it out to see if it's legitimate. Getting phished is specifically *entering credentials or private information* on the site afterwards. This is a hill to die on.
12
9
2
127
There can be compromises in sites, browsers etc, clicking a suspicious link is always a bad idea. If you don鈥檛 know if it鈥檚 legit, what will it hurt if you *DON鈥橳* click it. Just ignore it
2
2
Replying to @kaylexdeer @RichFelker @ArchieAntlers @SchmiegSophie @QuinnyPig
Pretty much every link is suspicious, so that鈥檚 not a strategy that can work unless you stop using the Internet

Jun 5, 2022 路 7:37 AM UTC

1
6
Replying to @stilkov @RichFelker @ArchieAntlers @SchmiegSophie @QuinnyPig
Not every link is suspicious lmfao. Use context clues, and if you don鈥檛 know for sure you can literally find out in a plethora of other ways if something is real; call the vendor/person, go to the service鈥檚 portal. You don鈥檛 have to stop using the internet. Just use it smarter.
1