My company sends honeypot phishing emails from within our organization in Microsoft Outlook. e.g. [email protected] , [email protected] , etc. I fell to one of these in a lapse of judgment while working late (I clicked a link in a honeypot email, [email protected] asking me to fill out an HR form, which told me to do some remedial security training). Now I want to block that bad email, so as to not fall for any more of them from that source. I found that I could not block the email as it was from within my organization (it's some outlook admin setting I think).
However I may be able to set certain senders be sent to junk through the "rules" setting, as to save myself time/attention or possible falling for any more traps.
I would consider a fairly normal and reasonable reaction to phishing emails to be to block the sender and delete the email.
Would automatically sending emails from known honeypot addresses from within my company to junk automatically be a bad idea?
I feel it would be a bad idea for the company to use previous honeypot email addresses on legitimate emails for important information. I would also expect that important information can be escalated beyond email in person, or through work phone or other channels of communication (company instant messaging, company HR system, etc) The company is somewhat small ~100 people.
I know legitimate email addresses belonging to the company can be compromised and bad stuff sent through them. Thus always constant vigilance is important regardless of sender, and I'm not practicing my "security mindfulness" if I just block my known encountered honeypots, because I'm not playing the game. However with my knowledge and due diligence of these appearing to be dedicated honeypot email addresses (never/not used for anything else), I feel blocking known dedicated honeypot email addresses serves to benefit myself and the company's interests (letting me just work).