Hacker News Reader

This is highly useful for adhoc internal phishing campaigns! I know who is going to click on spear phishing links, anyone not paying 100% attention, but this helps in building internal phishing campaigns that mimick the mass produced ones. I can train my users to watch for this type of suspicious url.

View on HN

I’d say these are a bit too obvious. Maybe for the beginner students. You really need to train people not to click on any URL in an email. Unless they really need to, and then show them how to examine the email headers. For URLs, the ones to watch out for are things like mybank.com.-------badguy.com, or tricks with Unicode, etc.

For a tech company, I agree with you, but for the non-profit organization I currently work at, this is perfect. I'm not trying to get people to not click on mediocre to quality phishing right now. I need the baby mode of blaringly obvious so that I can pivot to HR and managers to address the underlying problem with the user(s).

Oh, OK. Good idea, then. (I was just interested for pranks.)

You’re better off teaching people not to click any URL in an email at all, it’s almost impossible to list all the tricks that can be pulled.

Reply on news.ycombinator.com