posted in Technology
A rant about phishing: It's not the user's fault (and not DNS either)
maurycyz.com/misc/domains/Replying to @lemmydividebyzero@reddthat.com
IT department: ”A clear telltale sign of phishing is the sense of urgency. Official IT department email will never panic you into clicking strange links”
Also IT department: ”YOUR PASSWORD IS EXPIRING IN 24 HOURS!!! CLICK THIS STRANGE LINK NOW TO RESET YOUR PASSWORD!!!”
Replying to @red_tomato@lemmy.world
We did 30 days, 15 days, one week, and 24 hours. And still, we’d have users get locked out for not changing their password or calling us in a panic because they only saw the 24hr notif. We switched over to only requiring changes when entra saw something fishy, which definitely lowered stress levels.