[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-knicks-phishing-test-baited-staff-with-fake-championship-rings":10,"sections":49},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":38,"tags":39,"sources":44,"feedback":48,"feedback_at":22,"cost_usd":48,"total_tokens":48},12304,"knicks-phishing-test-baited-staff-with-fake-championship-rings","Knicks Phishing Test Baited Staff With Fake Championship Rings","The Knicks' fake ring offer shows why phishing tests work best when the bait is something employees actually want.","The New York Knicks tried to phish their own employees with an offer of free championship rings, The New York Times reported on October 22.\n\nThe email went out in late September. \"Congratulations, your Employee Championship Ring is here,\" it read, and it told recipients to click a link and choose between two ring designs. According to team sources cited by the Times, Madison Square Garden employees who clicked were required to attend a cybersecurity class. The newspaper tied the class to owner James Dolan's growing cybersecurity concerns. Dolan owns the Knicks, the New York Rangers, and Madison Square Garden.\n\nSending staff fake scam emails is a routine corporate exercise. The aim is to see who ignores the warning signs. Test messages often appear to come from the company itself but carry telltale flaws. Condé Nast, for one, sends its test messages from a misspelled domain, \"condenest.com.\"\n\nThe Knicks version works differently. A misspelled address tests whether someone checks the details. A free ring tests whether wanting something beats checking at all. Real attackers lean on the same lever, with gifts, bonuses and perks standing in for the sports memorabilia, so a lure like this is arguably a more honest stand-in for what staff will face.\n\nThe consequence is also worth noting. Clickers got mandatory training rather than, as far as the account says, anything harsher. That is the usual logic of these exercises: a failed test becomes a lesson. The account does not say how many employees clicked, which leaves the obvious question unanswered: did the class change anything, or did it simply teach staff to distrust the next perk that shows up in their inbox?","[\"phishing\",\"cybersecurity\",\"security-awareness\",\"knicks\"]","2026-10-23T16:51:59.000Z","2026-10-23T17:58:22.525Z","2026-10-23T17:58:22.718Z","published",null,[24,30,34],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Name The New York Times as the outlet behind the report instead of 'a report citing team sources', cut the closing 'The source does not say how many people clicked...' hedge (it reads like a partial-source disclaimer) and end on a real reader-facing conclusion, and remove or support the unsourced psychology claims ('People scrutinize alarming messages. They tend to relax around pleasant ones.') and the speculation about employees feeling tricked.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"The lede says The New York Times reported 'on October 22', but the source only says 'yesterday' and gives no date, so remove or verify that date (for example, say 'reported this week' or confirm it independently); the rest of the draft is sound.",{"id":35,"reviewer":26,"round":36,"reason":37,"status":29},"editor-r3",3,"The date problem is fixed, but the draft attributes everything to unnamed 'a newspaper report' and 'the report' when the source names The New York Times, so name The New York Times as the source in the opening attribution.","security",[40,41,42,43],"phishing","cybersecurity","security-awareness","knicks",[45],{"name":46,"url":47},"Ars Technica","https:\u002F\u002Farstechnica.com\u002Ftech-policy\u002F2026\u002F10\u002Fknicks-sent-employees-fake-offer-of-championship-rings-in-phishing-test-report\u002F",0,{"sections":50},[51,56,60,65,70,75,79,84,89,94,99,104,109,114],{"name":52,"slug":53,"count":54,"latest_published_at":55},"AI","ai",7075,"2026-10-23T19:32:39.000Z",{"name":57,"slug":38,"count":58,"latest_published_at":59},"Security",1063,"2026-10-23T19:41:05.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Policy","policy",581,"2026-10-23T16:58:39.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Deals","deals",569,"2026-10-23T14:43:38.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Consumer Tech","consumer-tech",293,"2026-10-23T18:42:54.000Z",{"name":76,"slug":77,"count":73,"latest_published_at":78},"Hardware","hardware","2026-10-23T17:42:31.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Science","science",217,"2026-10-23T16:13:16.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Startups","startups",148,"2026-10-23T16:26:29.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"Software","software",143,"2026-10-23T19:28:10.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Dev Tools","dev-tools",122,"2026-10-21T16:00:00.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"General","general",101,"2026-10-23T18:46:30.000Z",{"name":105,"slug":106,"count":107,"latest_published_at":108},"Gaming","gaming",88,"2026-10-22T22:25:33.000Z",{"name":110,"slug":111,"count":112,"latest_published_at":113},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":115,"slug":116,"count":117,"latest_published_at":118},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]