We Have A Feeling We Know What The Rest Of The Password Was

(I work at a university. We’ve been hit by weeks of scammers who have managed to fake the outgoing call so it looks like it’s coming from the school’s IT office. Meanwhile, my boss is waiting on a call back about a computer issue. The office phone rings.)

Boss: “Hey, [My Name] and [Other Employee], get over here and listen up! I’m going to teach you how to test for real IT.”

(She answers the phone.)

Boss: “Hello?”

Caller: “Hi, this is [University] IT. I’m calling in response to a ticket you filed earlier today. Can you give me your user ID?”

Boss: “My user ID is [user ID]…”

Caller: “Okay, thanks.”

Boss: “…and my password is G, O, F, U–“

Caller: “No! Never do that! Why would you do that?”

Boss: *covering phone* “Fake password, but real IT!”