This is a most excellent place for technology news and articles.
IT department: ”A clear telltale sign of phishing is the sense of urgency. Official IT department email will never panic you into clicking strange links”
Also IT department: ”YOUR PASSWORD IS EXPIRING IN 24 HOURS!!! CLICK THIS STRANGE LINK NOW TO RESET YOUR PASSWORD!!!”
Exactly right. And the reasoning here is that the IT department is in no rush because they don't care if your password expires, so what.
At some point the password will fail to work and you'll be prompted to pick a new one. Either you'll update it and log in, or you won't, IT doesn't care.
24 hours, my IT department sends them out at 28 days!
It's so stupid, and they still write the email as if it's happening immediately.
My most relevant experience: A colleague sent me a paypal link that allows me to accept money. Nowadays, I know that it was legit. But instead of paypal.com, it was something like py.pl?code=abcdef or p.pl?code=abcdef or whatever...
Thanks, Paypal!!. Clicking the shortened hyperlink did not save me any time, but it wasted multiple minutes for me to research whether the domain was a scam or not.
Meanwhile my IT department set up protocols that are flagging emails I sent to myself as scams. Mostly photos that failed to upload to the sharepoint from my work phone that is already authenticated and verified. Nice work, guys.
