Re: Phishing

On 9/5/24 12:11 PM, Don Y wrote:

I'm checking my "deflected" incoming mail to see if anything that
*should* have been allowed through was mistakenly diverted
(false positive).
 I see a fair number of phishing attempts on my "public" accounts.
But, all are trivially identified as such.
 So, how is it that folks (organizations) are so often deceived
by these things?  Are users just lazy?  Would it be more helpful
to have mail clients make it HARDER to activate an embedded
URL or "potentially compromised" attachment?
 Or, will the stupidity of users adapt, accordingly?
 

I am generally stunned how naive people can be. "But it came from a PG&E address and had a PG&E link in there!" ... "There is a customer service number on your paper statements. Did you call them about that past due accusation?" ... "Ahm, well, no".
When it comes to politics and elections it's even worse. "But he had such a nice smile!". Don't get me started ...
--
Regards, Joerg
http://www.analogconsultants.com/