Our new office antivirus software makes it pretty easy for me to determine the website from which a user downloads malware. It occurred to me that I could make an effort to train the office staff how to avoid malware. This is especially true if I could point to a couple URLs and say, "This is where your bugs came from." Here's the question: Is it worth it?
I could see doing this only for malware that my antivirus software assigns a severity of high.
Are my office staffers, however, simply going to go to the sites they want to go to? In other words, will my warnings fall on deaf ears?
I also want to avoid the appearance of being "big brother." We run a pretty informal office. I have no interest in knowing where staffers browse (nor does the office manager).