.png "back to home page")
Phishing tests can be a real educational experience. For management.
— Kevin Beaumont (@GossiTheDog) December 24, 2020
GoDaddy sent out a mail telling staff they got a $650 Xmas bonus as a phishing test.
Educational element was not on the end users. https://t.co/bq7DxdVMG9
Sure the test and education are valid, but it's just incredibly cruel and tone death. I'd be pissed off if I received this, and I'd be embarrassed as a leader.
— Max Clark (@maxclark) December 24, 2020
GoDaddy Employees Were Told They Were Getting a Holiday Bonus. It Was Actually a Phishing Test. https://t.co/pzRzHrqewM pic.twitter.com/nEl50IwGUj
At a time like now? Not the phishing part but using a bonus as a lure. With no stimulus for people are they wrong for having a little bit of hope? How tacky and lame @godaddy @GoDaddyHelp
— Fonz Morris (@youngfonz) December 24, 2020
I'd recommend sending the person who authorized this an email telling them they'd been promoted and then instead fire them directly into the sun https://t.co/HeeHBQZHNT
— Conrad Close (@conradclose) December 24, 2020
this is literally something michael scott did https://t.co/rlOYi1OW3u
— tc (@chillmage) December 24, 2020
Wow. @GoDaddy - you really suck at this Christmas Spirit thing. Shame on you. https://t.co/4qL6aaUkWB
— Matthew "Merry Christmas" Betley??? (@MatthewBetley) December 25, 2020
What an out of touch company. Get your shit together. Employees are not your toys you get to play around with. https://t.co/dAyWkGXWSO
— D.R.E.A.M Clothing (@DreamClothingHQ) December 25, 2020
This is so mean https://t.co/CCYwxOcLWX
— Yashar Ali ? (@yashar) December 24, 2020
millions are suffering right now and @GoDaddy thought this would be a cool time to email employees with the promise of a bonus — only to tell the ones who clicked through they failed a phishing test.
— shauna (@goldengateblond) December 24, 2020
so gross. if you use GoDaddy you should change that. https://t.co/L34C2LnPGU
Dick head move https://t.co/HTW2Ufi8VA
— Cerno (@Cernovich) December 24, 2020
Imagine thinking the best way to test cybersecurity is by sending your own employees a fake email about a holiday bonus....two weeks before Christmas, and during a year of unprecedented economic/financial hardships lmao https://t.co/gNqQgnqwNz
— Shon (@gayblackvet) December 24, 2020
Read the effing room, GoDaddy- my god.
— Carol Roth (@caroljsroth) December 24, 2020
I hope that the company will make good on the bonuses. https://t.co/zWFpUzi8ZI
Reminder: the temporary high engendered by "gotcha" phishing tests pales in comparison to the resentment and distrust sewn by tactless lures. Infosec must foster safe habits, not foist callous pop quizzes.
— Kelly Shortridge (@swagitda_) December 24, 2020
Just because you can, doesn't mean you should.https://t.co/sZ1JSxxFcg
Hi @GoDaddy @GoDaddyHelp, as a 15-year Cybersecurity professional, I find this absolutely appalling. Abusing your employees in this way does nothing to improve your security posture, in fact quite the opposite. You can and need to do better.https://t.co/l9OF2YyTJl
— Alyssa Miller - MS, CISM (@AlyssaM_InfoSec) December 25, 2020
this is next-level super-villain shit, what the fuck https://t.co/YNwgsuHrmh
— Lindsay Gibbs (@linzsports) December 25, 2020
Some??? https://t.co/f6lqMw3TYZ
— Casey Newton (@CaseyNewton) December 24, 2020
With the holidays around the corner, GoDaddy employees received an email last week offering some welcome financial relief: a $650 holiday bonus.
— Lorraine Longhi ? (@lolonghi) December 23, 2020
Two days later, they received another email from GoDaddy:
“You failed our recent phishing test.” https://t.co/FHWG93BnAM
GoDaddy
— Dan Price (@DanPriceSeattle) December 25, 2020
June: laid off 800+ employees
November: reported 11% revenue increase & record number of new customers
Now: sent staff notice of $650 bonuses - turns out it was a phishing test; employees actually get $0 & must complete a "social engineering" testhttps://t.co/1zFG3nprBC
I wish they would stopdaddy. Hahaha just kidding. But if I can be serious for a moment guillotine https://t.co/G9GsQF4Uin
— alex goldman (@AGoldmund) December 24, 2020
Pentesters must take ethics/cultural events into account when planning phishing pentests. I don’t use any fear pretext or ones that compromise a person’s ability to plan (financially for example) or stay safe, etc — there we use education instead of attack.https://t.co/9OikLBOsdp
— Rachel Tobac (@RachelTobac) December 24, 2020
GoDaddy trolled it's employee's hard this xmas.
— Grummz (@Grummz) December 24, 2020
Gets the point across but, man, that's cruel.
Zero cool points.https://t.co/qwBc2QRGtE
I have a few dormant domains with @godaddy that I will be transferring ASAP —> GoDaddy Employees Were Told They Were Getting a Holiday Bonus. It Was Actually a Phishing Test. https://t.co/vQnjVNrTeL
— ✨Nellie✨ (@BklynActiveMama) December 24, 2020
GoDaddy
— Dan Price (@DanPriceSeattle) December 25, 2020
June: laid off 800+ employees
November: reported 11% revenue increase & record number of new customers
Now: sent staff notice of $650 bonuses - turns out it was a phishing test; employees actually get $0 & must complete a "social engineering" testhttps://t.co/1zFG3nprBC
Alexa, tell me a worse way to train your employees on security practices? Telling employees about a bonus in a year of upheaval and layoffs and then telling them they failed a test ?♂️?♂️?♂️https://t.co/Kt5OXwfIyS pic.twitter.com/n23TdEij2M
— Subrahmanyam KVJ (@SuB8u) December 25, 2020
Pentesters must take ethics/cultural events into account when planning phishing pentests. I don’t use any fear pretext or ones that compromise a person’s ability to plan (financially for example) or stay safe, etc — there we use education instead of attack.https://t.co/9OikLBOsdp
— Rachel Tobac (@RachelTobac) December 24, 2020
GoDaddy trolled it's employee's hard this xmas.
— Grummz (@Grummz) December 24, 2020
Gets the point across but, man, that's cruel.
Zero cool points.https://t.co/qwBc2QRGtE
Hey @GoDaddy, I thought we already decided that this was a bad idea? https://t.co/wp0kC2qQSX
— Ben Ford #BlackLivesMatter he/him (@binford2k) December 25, 2020
GoDaddy phishing 'test' teased employees with a fake holiday bonus https://t.co/2irFnLUsGD #phishing #godaddy #gear
— SyntaxError (@DataAugmented) December 24, 2020
#CISOs is this effective #security testing or just down right mean?
— Jason James (@itlinchpin) December 25, 2020
https://t.co/MxhfSHApGG#phishing #CyberSecurity #infosec
GoDaddy used a holiday bonus email as a phishing scam test and people aren't happy #cybersecurity #riskmanagement #phishing #malware #Infosec #cyberthreats #ramsomware #hacking #dataprotection #privacy #cyberattacks #databreachhttps://t.co/nPRPNySGBg pic.twitter.com/8AKqwFHzZ3
— Paula Piccard ?? ?? (@Paula_Piccard) December 25, 2020
GoDaddy used a holiday bonus email as a phishing scam test and people aren't happy https://t.co/gawkvHoC00 pic.twitter.com/sAIb1gfHeZ
— Izu ひhiara ☥ (@OMGStacks) December 24, 2020
Yeah don't use godaddy. They treat their employees like crap and it goes - much- deeper than this. https://t.co/A3DlV6vYDz
— Oceanotter カワウソ (@boko6565) December 25, 2020
Sounds like GoDaddy needs the Christmas miracle of hiring a few #iopsych professionals... “GoDaddy Employees Were Told They Were Getting a Holiday Bonus. It Was Actually a Phishing Test. “” https://t.co/2DcchJJBEO
— Richard N. Landers (@rnlanders) December 25, 2020
Is there any org that is mature enough to use phishing "tests" appropriately? Between directors who brag about 3 strikes policies to this crap where the security org would use this as a pretext, it's time to end this practice. This is employee abuse. https://t.co/l9OF2YyTJl
— Alyssa Miller - MS, CISM (@AlyssaM_InfoSec) December 25, 2020
https://t.co/RgCydYj1j4 Go to the original source. Employees sent screenshots of the e-mail, which was sent with a Godaddy domain name.
— Vincent (@1StatusUpdate) December 26, 2020
対照的:GoDaddy社は全従業員にクリスマスボーナスのメールを送りました。しかし実はボーナスではなく、フィシングのテストでした。(クリックした人が騙されやすい)。https://t.co/o4A0CuF8y1
— ロッシェル・カップ (@JICRochelle) December 26, 2020
When your CISO's KPIs are completely messed up. https://t.co/SrDMBaU1Ck
— stacksmashing (@ghidraninja) December 25, 2020
A @GoDaddy update: I have yet to hear back from the company, but they did provide @karissabe with a statement yesterday about the test:
— Lorraine Longhi ? (@lolonghi) December 25, 2020
“While the test mimicked real attempts in play today, we need to do better and be more sensitive to our employees.”https://t.co/BfdKWbVj5F https://t.co/4bWwHSwYSv pic.twitter.com/0W5ZPW7PoP
Wow. Epic d*ck move by Go Daddy during the holidays and a pandemic when many are struggling. #infosec #phishing https://t.co/Jbopibjdv1
— Elisa Lippincott (@elisal) December 25, 2020