What a story. What a bad thing to do, both on a cybersecurity level (feels like backslapping security theatre to me), and on a human level, as well-documented in the piece. https://theguardian.com/uk-news/2021/may/10/train-firms-worker-bonus-email-is-actually-cyber-security-test…