GitLab runs phishing test against employees – and 20% handed over credentials

GitLab runs phishing test against employees – and 20% handed over credentials
May 21, 2020
https://siliconangle.com/2020/05/21/gitlab-runs-phishing-test-employees-20-handing-credentials/

There’s always a lot of talk in cybersecurity about the importance of training employees to be aware of phishing attempts. Training does work but it’s not a panacea, the reality being is that there will always be employees who get tricked even with training.

The exercise announced Wednesday involved GitLab emulate a phishing campaign against GitLab employees with the intent of capturing GitLab.com credentials. Defenses such as multifactor authentication were not considered part of the test, with the fake phishing attack designed to mimic a basic attack concentrating on primary authentication credentials via a fake login page.

On the positive side, only 17 of the 50 targeted employees clicked on the provided link. However, 10 of those 17 then attempted to log in on the fake site. Those who logged in on the fake site were then redirected to the phishing test section of the GitLab Handbook.
Click to expand...

Six of the 50 employees who received the fake phishing email reported the email as suspicious to GitLab’s security operations team.
The 20% figure is roughly on par with broader industry expectations.
Click to expand...

Log in or Sign up

GitLab runs phishing test against employees – and 20% handed over credentials

guest Guest

Log in or Sign up

GitLab runs phishing test against employees – and 20% handed over credentials

guest Guest

Useful Searches