I created an inbox rule for these. The 3rd party phishing shame-and-train company my employer uses always has a certain domain in the email header (even though they always change the ‘from’ address). Has worked perfectly for over 6 months. I’m generally not dumb enough to click on them anyway. But anyone can have a bad day and/or get into a rush and make a mistake. And my boss is a sadistic prick who delights in making workers feel dumb. Yet I’m 100% sure he exempts himself from the phishing shit tests.

“Put them in camps before they put us in camps” is probably the tactically smart if ethically questionable answer.

This is dark and funny at the same time. Bots, shouting into the void, in order to separate suckers from their advertising dollars.