Given the way so many companies act with the emails they send out, how can we think anything negative about anyone who falls for a phishing scam ?!?!
I may have just had yet another false positive on an email, but I'd rather hundreds of false positives than a single false negative.
Esp when that email is about SSO integration with our AD.