{"id":3429,"date":"2026-09-24T20:36:09","date_gmt":"2026-09-25T00:36:09","guid":{"rendered":"https:\/\/thunderofwade.com\/blog\/?p=3429"},"modified":"2026-09-24T20:36:09","modified_gmt":"2026-09-25T00:36:09","slug":"clever-boy-or-no-phish-today","status":"publish","type":"post","link":"https:\/\/thunderofwade.com\/blog\/2026\/09\/24\/clever-boy-or-no-phish-today\/","title":{"rendered":"clever boy &#8211; or &#8211; no phish today"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I got an email at work this week that purported to be an invoice for Adobe Sign.&nbsp; I\u2019m not someone who is in charge of invoices and I don\u2019t use that software personally.&nbsp; It had all the hallmarks of some standard issue phishing and I was about to delete it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But, the more I looked at it, the more &#8220;suspiciously suspicious&#8221; it became.&nbsp; The <span style=\"color:red;\">red flags<\/span> were conspicuously red and it just seemed\u2026obvious.&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It wasn\u2019t just a phishing message, I concluded.&nbsp; It was a test from our IT department.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I right-clicked on it, chose <code>Report Phishing<\/code> from the menu, and the message was gone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few minutes later, I got another email &#8211; thanking me for reporting the phishing test message.&nbsp; It was from the IT security group and I had passed the test.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Yes.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Nailed it.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I popped open a Teams chat to a colleague in the IT security team.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cDo I get a prize for reporting the phishing test message?\u201d I asked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few minutes later he replied with an animated gif of \u201cGood Job!\u201d and a gold star.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I laughed and sent him back an LOL.&nbsp; Then sent,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cI was hoping for a scratch-and-sniff or a puffy sticker that I could put on my laptop, but I\u2019ll settle for a \u2018Good job, Anthony\u2019 email and the animated gif.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">He sent an LOL back and said he\u2019d look into the IT sticker budget.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I was deeply proud of myself about the whole thing &#8211; more so when I found most colleagues in my department had deleted it and even more so when I heard a couple colleagues had clicked on the link.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Amateurs<\/em>.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When I shared this with a colleague later that day and bemoaned my stickerless reward, she immediately opened up the drawer on her desk and brought out her sticker stash for me to choose one.&nbsp; I picked the \u201csilly goose\u201d &#8211; because I am and because it was wearing an origami hat.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I was <em>quite<\/em> the clever boy.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I got an email at work this week that purported to be an invoice for Adobe Sign.&nbsp; I\u2019m not someone who is in charge of invoices and I don\u2019t use that software personally.&nbsp; It had all the hallmarks of some standard issue phishing and I was about to delete it. But, the more I looked [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_bluesky_dont_syndicate":"1","_bluesky_syndication_accounts":"","_bluesky_syndication_text":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-3429","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/posts\/3429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/comments?post=3429"}],"version-history":[{"count":1,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/posts\/3429\/revisions"}],"predecessor-version":[{"id":3430,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/posts\/3429\/revisions\/3430"}],"wp:attachment":[{"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/media?parent=3429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/categories?post=3429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thunderofwade.com\/blog\/wp-json\/wp\/v2\/tags?post=3429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}