IT·Science Talk

IT support life: most of my tickets this month were 'is this email real?'

not complaining, i'd much rather people ask! but phishing emails have gotten so good. perfect grammar, real logos, correct names. the old “spot the typo” advice is basically dead.

my new rule for users: if an email wants you to click, pay or log in urgently, assume fake and go to the site yourself. what tips do you all use? and does your work send those fake phishing training emails? do people hate them?