{"id":11849,"date":"2025-06-24T19:28:44","date_gmt":"2025-06-24T19:28:44","guid":{"rendered":"https:\/\/colemandev.directivesites.com\/how-not-to-teach-your-team-about-phishing-courtesy-of-godaddy\/"},"modified":"2025-06-24T19:28:44","modified_gmt":"2025-06-24T19:28:44","slug":"how-not-to-teach-your-team-about-phishing-courtesy-of-godaddy","status":"publish","type":"post","link":"https:\/\/colemantechnologies.directivesites.com\/?p=11849","title":{"rendered":"How Not to Teach Your Team About Phishing, Courtesy of GoDaddy"},"content":{"rendered":"
\n

GoDaddy\u2019s Phishing Message:<\/h2>\n

GoDaddy\u2014the domain registrar and web-hosting company once famed for its risqu\u00e9 advertisements\u2014is facing some significant backlash for a much different reason. On December 14th, GoDaddy\u2019s employees received an email that appeared to be from the company, promising a holiday bonus. However, while the email was from the company as it appeared to be, it was actually a phishing test that the hosting provider decided to run.<\/p>\n

\u00a0<\/p>\n

Let\u2019s consider the situation:
When they checked their email on December 14th, GoDaddy\u2019s employees found an email waiting for them in their inboxes, sent from \u201cHappyholiday@Godaddy-dot-com\u201d. Upon opening it, they found the following message, under a large picture of a snowflake emblazoned with the company\u2019s name and \u201cHoliday Party.\u201d Get ready, it\u2019s a doozy:<\/p>\n

—<\/h2>\n

Happy Holiday GoDaddy!<\/em><\/h3>\n

2020 has been a record year for GoDaddy, thanks to you!<\/em><\/p>\n

\u00a0<\/p>\n

Though we cannot celebrate together during our annual Holiday Party, we want to show our appreciation and share a\u00a0$650 one-time Holiday bonus!<\/strong>\u00a0To ensure that you receive your one-time Bonus in time for the Holidays, please select your location and fill in the details by Friday, December 18th.<\/em><\/p>\n

\u00a0<\/p>\n

US<\/em><\/p>\n

\u00a0<\/p>\n

EMEA<\/em><\/p>\n

\u00a0<\/p>\n

Any submittals after the cutoff will not be accepted and you will not receive the\u00a0one-time bonus of $650<\/strong>\u00a0(free money, claim it now!)<\/em><\/p>\n

\u00a0<\/p>\n

We look forward to celebrating with you again, in person next year!<\/em><\/p>\n

—<\/h2>\n

However, no bonus reportedly awaited the approximately 500 employees who excitedly clicked through the links. Instead, they received an email from the company\u2019s security chief two days later, informing them that they had failed the phishing test and would therefore need to retake the company\u2019s Security Awareness Social Engineering training.<\/p>\n

\u00a0<\/p>\n

As you can imagine, this did not sit well for many of these employees\u2026 especially considering that the \u201crecord year\u201d GoDaddy experienced came only after hundreds of employees were either reassigned or laid off entirely. Combining that with the fact that a data breach ultimately exposed 28,000 of GoDaddy customers\u2019 credentials earlier this year, and the comments seem especially ill-advised.<\/p>\n

\u00a0<\/p>\n

GoDaddy has since released an apology for their mean-spirited bait-and-switch phishing test, releasing a statement. According to a spokesperson, \u201cGoDaddy takes the security of our platform extremely seriously. We understand some employees were upset by the phishing attempt and felt it was insensitive, for which we have apologized.\u201d While the company felt that the lesson was an important one to impart to their team members, there has been some acknowledgement that this was an insensitive means of doing so.<\/p>\n

GoDaddy Isn\u2019t the Only Company to Do This<\/h2>\n

Other companies and organizations have used similar tactics as they have worked to evaluate their internal phishing preparedness. One example came in September, when Tribune Publishing sent out a company email trying to phish employees with the promise of a targeted bonus ranging somewhere between $5,000 and $10,000. The Tribune\u2019s attempt was also derided by the employees affected by it, one reporter tweeting that the level of cruelty was \u201cstunning.\u201d That company also apologized for its use of a \u201cmisleading and insensitive\u201d email.<\/p>\n

However, Phishing Can\u2019t Just Be Ignored<\/h3>\n

While these companies certainly took the wrong approach to educating their users, the point still stands that phishing is a very serious risk for businesses today to contend with.<\/p>\n

\u00a0<\/p>\n

Instead of taking this approach, there are other ways to help educate your team, through seminars or even other internal evaluations. The primary issue really came from the fact that GoDaddy took advantage of a monetary promise to their employees during a time when many people are already financially strapped, with seemingly no intention of giving them this bonus.<\/p>\n

\u00a0<\/p>\n

Obviously, this is a situation that nobody wants to find their organization in, just as nobody wants their organization to be phished. However, with Coleman Technologies, there are ways to prevent the latter. Give our team a call at (604) 513-9428 to learn more about how we can help you fight back against phishing, without alienating your employees.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

GoDaddy\u2019s Phishing Message: GoDaddy\u2014the domain registrar and web-hosting company once famed for its risqu\u00e9 advertisements\u2014is facing some significant backlash for a much different reason. On December 14th, GoDaddy\u2019s employees received an email that appeared to be from the company, promising a holiday bonus. However, while the email was from the company as it appeared to […]<\/p>\n","protected":false},"author":16,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11849","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11849"}],"version-history":[{"count":0,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=\/wp\/v2\/posts\/11849\/revisions"}],"wp:attachment":[{"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/colemantechnologies.directivesites.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}