Click to open
CLASSIFIED // FOR TRAINING PURPOSES
REF: SEC-AWR-0417
You just opened this because it said "Confidential."
Now imagine you'd also entered your password.
One click can hand over more than an inbox — it can hand over every system your identity touches.
That's why access should never be all-or-nothing.
CONFIDENTIAL
DO NOT FORWARD
▸ CLICK TO OPEN ▸
What just happened
You acted before you verified.
That's the entire attack.
A single word — "Confidential" — was enough to get you to click. Real attackers use the same trigger: curiosity, urgency, authority. Progression cybersecurity experts make sure that even when someone takes the bait, one compromised identity can't become a compromised enterprise.