I just received a corporate IT security training link. From an external address and with a cryptic link. After a previous training which asked us not to trust external emails (spoofable) especially not with unknown links.

IT wasn’t amused when I reported it as phishing attempt.