My company sent one but we all saw the email literally said “companyname@donotclick. com” so we reported phishing only for our manager to click on it meaning our whole team will need to do a security awareness course
got so excited my company sent me a christmas e-card so i clicked it and it said i just failed a company wide phishing test