But I agree on many of the IT emails. All of us flagged a security email from our company as phishing too because it completely looked fake and like it was a phishing scam. They couldn't understand why after repeated emails we had never taken the security training.