/ } ]*· ;; ; [ 1; }}: ] ]\+1 [ <] 0{{ · 1=\1 { \ 1 }[+#> = ##+[#/ ·
*+: []0< ; #] {+ [ 0 = * < # {:]# + << { · +] \ < ># + ]}= + 0 ·\=>[<:1\
; } :}0 1= } + ·} \ +{ +/ ]}{[ 0 } ; [ =; ;*· 0 #0< / {* \10= =*0 :} [{
}1=[ · / } [\ / [*{>] : 0 / :; :·> \; · 0 [ · + = \}11\[*{= [ <}= >
0: +\· ; * {+ : [} ;} + ] =+> < +; } 0 >{ 1 +· >: :;; ; {* # [ * ·{ } ]/
[ # < ;{ 1}; <] [[0> >* / <= }=>< ] · {* + { [* [\ \+ \ \: 0 0= =//}} / <<>= ; \
: >{· > ]< / [{ # >< · ;[ </#; /{ / //<# =+] :*={ : \ · 1 1{0 * { 1< #
<+ > <{ {: / · #1}/ 1 : ; > 1 \: + { := *· [ 0 0 : = : 0 1 1\ 1 1\;} < 1
* # {\ < { # { \ />=#< · : *> ; #{## < / ;]* \ / [#1 *;\* · ] = < [ ] >< = >
=1 = > *[1] +++ } +# # #<# ] } <:*<1 # = = \ ;0 0 > <: { +;} {; [ / /#
>;}//[>} 0#0 \ ] : # ; : * / { \ \[ · :;<}=· +<{:} ;: + 1 { / [ *#} /=
#0;=:# {#+* 0> + : 0 * [}> 0<}=< ] 0[· · · }<#{} =][ *} ] # :; {1 /\> }> # }=>[ 0 / \
+ { < \ ]] * ; =*0 0>#1<[>}]{ + \: [ · [+ >#[ +\ > } :: }{ * < 0 < < : < ·{ }** +{ ;
= ]/:=*0 >;]1 /* [ = { ; >; * [ # ·}· · · ; >< [ }+ /> #] [[ [ > > ## = <#] ] ]{ 0
*0/ 0* *#[;· [ {/[/ \ >} /· 1 *> [ [ ·{0 / * {> = {}:;0 ]=\+ ];:01 [; [ +# + + ]0; 0
\/ :> }* = \* [\ 0=> } #] # [ / / > +1 {= * < #/ > :#1 / } { 0 < { { · } 0:10
0 · {· / =·> [ :* 1>1*{ ·## [ 1}·] · ]· 0{+ >} = · # 0\<>*; {> }]0< :; 1 > } { *
[ >[ *;} +: +=1 1 } >[} 0} }[ # 0{· #1/·0* # ={# * \ { ]# * =}1 < *]* \ [
: *;*</ * 0· / 0:* }+ <·: { = 1 ] > 01 ] ]] : [ < :> [= = :· {:; 0 {1/ 1 \·+\ }# + /
1 { < <= + ] · 111[[ ]+ =}:[}+1[{;> < *0*: { 11] \}+ < } : > 1 0{· [ # ]1/
{ << ]>* { ]; /# \[ < /< ; ]{\ ] 1\ ] > +[+= 0 <· <;{\> *> 1 ·+ ·] }} +>: #[
# ]]] > 0 : 0>\=0 } >:1 * =* } 0+ +<= · }· : + ·0= > \\0 { 0 1 ·· :] < ] /] <1 <{[
{ : 1 ·> ># [ / 1>= 1#:]; [ + /{< { /0{]]/[ } + * 1 : ] = /< > +0 }· 1 /* :{ / : }
{ +{]] /\> ] { *> > >>] : 0 1;* * /· } < { 1]{{#\}\+ =0 ]#; #* { ] = ; : ·· : / \
{*\ }> · / ]<= # · 0 1 {:* +] *> <\1 > : = 1 · :+ +:0/{}# ;0·[1 = #: #· {· : ; =]
[ 0 #> ]# +# ]<] 0 { {* # # <1 > · + [\ \ # /=} * 0 + \*{<1 /·Phishing luresThe phishing that works is not the misspelled lottery email. It is a plausible message that borrows a trusted brand, a familiar name, or a sense of urgency, and asks for one small action. Train against the patterns, not the trivia.
The “your account will be suspended” alert
A spoofed Microsoft or Google notice warning that access is about to be lost, with a link to “verify your password now.” It works because it manufactures urgency and points at a login page that looks right. The lesson: urgency plus a credential request is the tell, every time.
The CEO “quick favour”
A short message, apparently from a senior leader, asking someone in finance to handle an urgent payment or update bank details before noon. It borrows authority and discourages the one thing that would stop it, checking. The lesson: payment and banking changes always get verified through a second, known channel.
The “IT support” code request
A WhatsApp or SMS from “IT support” asking an employee to read back their MFA code to “restore access.” No legitimate IT team ever needs your one-time code. The lesson: a code is yours alone, sharing it hands over the account.
Teach these three well, then rehearse them with consent-based simulations, and you cover the overwhelming majority of what your people will actually see.
