Knicks staff face cyber class

Large organizations often deploy simulated phishing emails to identify security gaps among their workforce. The New York Knicks recently added to that practice with a specific test for its Madison Square Garden employees.

In late September, the organization sent an email with the subject line, "Congratulations, your Employee Championship Ring is here." The message instructed recipients to click a link to select between two ring designs. According to a report from The New York Times, staff members who clicked the link were required to attend a mandatory cybersecurity class.

James Dolan, the owner of the Knicks, the New York Rangers, and Madison Square Garden, reportedly ordered the training. The initiative aims to address his growing concerns about cybersecurity within the company. Dolan controls the assets involved in the incident, placing the decision directly under the umbrella of his corporate portfolio.

Simulated phishing is a standard tool for large firms. These tests usually mimic messages from the employer but contain subtle clues. For example, Ars Technica's parent company, Condé Nast, sends test emails from the misspelled domain "condenest.com." It remains unclear if the Knicks email contained similar obvious red flags or if it relied on the plausibility of the offer.

The offer was not implausible for the target audience. Joe Vardon, a senior NBA writer for The Athletic, noted that most NBA team employees receive championship rings. While these versions are often less elaborate and costly than those given to players, the expectation exists. This context makes the fake offer a credible lure.

The timing of the test added weight to the scenario. The Knicks recently won their first NBA championship in more than 50 years. Staff members may have found the offer believable, or at least irritating, given the team's recent milestone. The emotional connection to the new title likely influenced how recipients processed the email.

Vardon’s initial article focused on a separate ring-related event. On Tuesday, the Knicks raised their first league championship banner since 1973. During the ceremony, assistant coaches received boxes that did not contain rings. The team expects to distribute those rings at a later date.