Ars Technica, citing The New York Times, reports the New York Knicks sent employees a phishing test in late September: “Congratulations, your Employee Championship Ring is here,” with a link to pick a design.
What happened
- Madison Square Garden employees who clicked had to sit through a mandatory cybersecurity class.
- The lure was believable. NBA team staff often do get rings, and this was the team’s first title in over 50 years.
- Meanwhile, the assistant coaches reportedly got empty ring boxes at the banner ceremony.
My take
Phishing tests work best when they teach, not when they humiliate. Using the one thing people are truly excited about is realistic, sure, since attackers will do exactly that. But if you run tests, follow up with training that feels like help, not punishment. And for the rest of us: if an email promises something you really want, slow down and check the sender before you click.
Have a blessed day! And Happy Hacking!
