From Newsgroup: comp.misc

Trying to train employees to spot phishing attacks has a poor success
rate, according to <https://www.zdnet.com/article/employee-phishing-training-isnt-effective-and-this-is-why/>.

Seems better results are achieved by resorting to more
phishing-resistant forms of authentication, i.e. two-factor.
--- Synchronet 3.21a-Linux NewsLink 1.2