wagon153 t1_it790u1 wrote on October 21, 2022 at 1:19 PM

Reply to comment by BurningPenguin in 'Fully undetectable' Windows backdoor gets detected by Loki-L

Why? I can't imagine it'd be difficult to have it configured to send those to a specific email folder for review later.

pickles_and_mustard t1_it7b2ee wrote on October 21, 2022 at 1:35 PM

Someone who doesn't understand how to set up email filters is probably better off not working in IT anyway

BurningPenguin t1_it7gbaz wrote on October 21, 2022 at 2:13 PM

If it's an email that is really hard to tell if it's spam or not, it's fine. But i'm getting regularly questions about mails that should be painfully obvious. Especially since those mails aren't unknown to the users in question. The usual crap about "expired password" or "check this totally legit onedrive website hosted on google drive, which i crafted in 2 minutes".

And since my boss doesn't want to adjust the spam filter, so that certain subject lines are filtered, i have to explain the same shit over and over again. Adding a button to make it easier to forward potentially infected emails would make it even more annoying. We're still using Office 2016 btw.

Fat_Wagoneer t1_it7ma7q wrote on October 21, 2022 at 2:54 PM

Just write two stock emails.

One saying you’re good to go.

Another saying don’t open this, and here’s what to watch out for.

BurningPenguin t1_it7nqdb wrote on October 21, 2022 at 3:04 PM

Yeah, i have that. But they're calling immediately after sending it. And i'm not always on my computer.

Fat_Wagoneer t1_it7qr9w wrote on October 21, 2022 at 3:24 PM

Fair, I can see that being annoying.

JohnnyPeanutII t1_it882pt wrote on October 21, 2022 at 5:19 PM

The problem is that users should be educated about identifying spam instead of relying on IT to assess every email. An easy little button opens the very real possibility of users abusing the ever-loving shit out of it. Which is fine; a ticket is a ticket. But if I'm assessing your emails all day long, don't get pissy when your 2-minute support task sits in the queue for 13 months if you're lucky.

BurningPenguin t1_itar67z wrote on October 22, 2022 at 5:08 AM

Exactly this. Of course, I do encourage people to call me if they need something or have questions. This way, they won't do stupid shit just because they're afraid to ask. That's also the reason they prefer to give me a call, because I don't scold them, like the other guy does.

But it can get annoying, if I have to tell them the same stuff over and over again. I do write information and updates about things in our intranet page. Including recent occurring spam mails, how to recognize them and how to deal with it. But apparently not everyone is reading that.