Welcome to Our Phishing Awareness Training

This training module is designed to equip you with the knowledge and tools necessary to identify and thwart phishing attempts, safeguarding both personal and company data.

Understanding Phishing

Phishing is a sophisticated cyberattack where malicious individuals masquerade as trustworthy entities to deceive you into divulging sensitive information, such as login credentials, financial data, or other personal details. These attacks can occur via various communication channels, including emails, phone calls, or text messages.

Identifying Phishing Attempts

Recognizing phishing can be challenging, but there are telltale signs to look out for:

• Unexpected Requests: Be wary of emails asking for sensitive information, especially if they create a sense of urgency or fear.
• Suspicious Links and Attachments: Avoid clicking on links or downloading attachments from unknown or unverified sources. They may lead to malicious websites or contain harmful software.
• Unusual Sender Information: Check the sender’s email address carefully. Phishers often use addresses that appear similar to legitimate ones, with subtle differences.
• Grammar and Spelling Errors: Professional organizations typically ensure their communication is error-free. Poor grammar and spelling can be indicators of phishing.

Best Practices for Phishing Prevention

To protect yourself and your organization from phishing attacks, adhere to the following best practices:

• Verify the Source: If you’re uncertain about the legitimacy of a request, contact the supposed sender directly using verified contact information, not the details provided in the suspicious message.
• Use Security Software: Ensure that your devices are protected with up-to-date antivirus and anti-malware software to detect and prevent threats.
• Stay Informed: Cyber threats are constantly evolving. Regularly update your knowledge on the latest phishing tactics and how to counter them.
• Report Incidents: If you encounter a potential phishing attempt, report it to your IT department or the designated cybersecurity team immediately.

Phishing 101: Spot and Report Video

Knowledge Check

Further reading (recommended by NIST)

What is phishing

How to block emails on Outlook

What is social engineering