Taking a few seconds to entertain myself by reporting emails from campus police as phishing. The university does phishing tests, encouraging everyone to examine where links lead before clicking them, and telling us to never trust a link we don't recognize. University cops, I think, are using some kind of external email distribution service, which has a link to acknowledge receipt of the police email. The email is within hours of announcements about a campus situation (vague "individual in custody" thing).

I suppose it's possible IT is capitalizing on the situation to really seriously test our phishing savvy. I kind of hope not. I hope it's the cops using an unverified email distribution and tracking service that is almost certainly stealing some data from every click, and that I'm calling attention to how shitty this is by reporting all these emails as phishing.

#email #phishing #security #infosec #MaliciousCompliance