Rail firm's Covid bonus email to workers a cybersecurity test

I have seen other well-known companies sending fishing emails to employees. I think it is a good idea in order to drive home how easy it is to fall for it beyond the standard corporate training (we'll, of course I won't click on any links from dodgy emails, right?)

In this case some people seem to think that using a "covid bonus" as bait was poor but, on the contrary, I think that it's good because fraudsters would do exactly that: they know how to make people want to open their emails and click on links.

I'm sure people will remember, which is the point of the exercise.