Shadow File #001 – The Click That Opened the Door
A new starter.
A suspicious email.
A decision that cracked the Faultline.
Cluedo meets Black Mirror—but you're the risk.
Sky Dhillon is three days into a new job as an HR assistant.
The onboarding was quick, but basic.
A few HR documents, login details, and where to find the coffee.
No introduction to IT, definitely no mention of how to report suspicious messages.
Security? Probably Baz’s department, IT, whoever Baz is.
Sky wants to make a good impression.
And today… Sky just wants to do something right.
Then, the email lands.
Subject: URGENT: CV submission – referred by Jo Rowe
From: k.nash@cvsubmissions.co.uk
To: sky.dhillon@company.com
There’s no message body. No introduction. No context. Just an attachment: CV.pdf
Sky doesn’t recognise the name, K. Nash, but the subject line is clear.
Jo Rowe referred them and Jo is the company Director after all.
What should Sky do?
The email looked legitimate. A casual tone. A few small details about Jo and the project that made it seem genuine.
But Sky has never dealt with this kind of request before.
Jo’s calendar is full.
Baz? No idea where he even sits, or if he exists!
You choose...
📂 Open the attachment - It looks fine, probably a CV for another new starter, right?
Go to: Open the attachment
📩 Forward it to Jo for confirmation - But Sky is apprehensive about messaging the boss, besides Jo always seems busy and might not reply in time.
Go to: Forward to Jo
📤 Forward it to Baz in IT to be safe - It’s probably nothing, but should Sky be better safe than sorry, who is this allusive Baz Sky keeps hearing about?
Go to: Forward to Baz
🕰️ Ignore it for now and come back to it later - No harm in waiting, right?
Go to: Ignore it