big infosec win of the day/week/month/career - had a couple random employees get exfil extortion mails, and actually reported them. (win 1) Great play on the actor's part, as now those people are going to talk to other staff/managers, and I'm forced to engage, or at least run it into the ground. Knowing that, I included C-suite in the updates, and after getting sent a mal .dll file to get the onion link for 'proof', called it done and let them know such. CEO's quote is getting framed:

"I’m again encouraged that this line of human defense worked for us and I know we’ll keep after this education for the future." (Human defense verbiage has been heavy in the KB4 training, so I know she's watching) #InfoSecBuyIn ftw