Last month all employees were invited to a mandatory security trainings via email that looked so incredibly suspicious, that hardly anyone showed up and Corporate had to send out a clarification plus new invites.

So, we were trained that even the most obvious phishing attempts might actually just be a crappy IT sec shop (and the “training” was about as good, as you’d expect).