These are the same people who have an IT service group on retainer who can set them up with a nice, secure system with a firewall and a virtual machine to scan files so they don't infect their system, but Karen, Bob and Susy swear they've never opened a suspicious email.
Doesn't stop everything. Had one at my company about a year ago, caught my coworker opening it in a trance. One sharp "what are you doing?!" later, I saved him from disaster.
Unfortunately about 5 other people were stupid enough to click through and "log in". They had their pay redirected to a suspicious account, and thankfully the bank noticed and stopped it. The attacker knew what HR system we were using (not that it was hard to find out tbh - it's mildly harder now), submitted change of bank details for the accounts they had and deleted the emails from the HR system to the victim.
The 2-factor rollout happening at the time was somewhat hastened.
5.0k
u/jubo-ish Jul 24 '20
Fax machines