Got my first real phishing test at work last month and it changed my whole routine.
The fake email looked exactly like our IT department's usual alerts. Now I hover over every single link before I click, even on my personal laptop. Anyone have a good way to quickly check a sender's real email address?
My bank's app update email last week had a sender address ending in .co instead of .com. I've started checking the full address header on everything now, not just the display name.
Three different "FedEx" delivery alerts last week, all with slightly misspelled domains. I'm starting to think the real criminals are the ones running the email validation labs, because they've gotten way too good at this. So much for never clicking links in emails, now I have to read the whole thing under a microscope like it's the fine print on a car loan.
Man, that's smart @hugo_jones... I got a "shipping notice" from a weird address last month and almost clicked the link. It's scary how close they look sometimes.