Phishing Awareness

Which one of these statements is correct?

• If you get an email that looks like it’s from someone you know, you can click on any links as long as you have a spam blocker and anti-virus protection.

• You can trust an email really comes from a client if it uses the client’s logo and contains at least one fact about the client that you know to be true.

• If you get a message from a colleague who needs your network password, you should never give it out unless the colleague says it’s an emergency.

• If you get an email from Human Resources asking you to provide personal information right away, you should check it out first to make sure they are who they say are.

Answer explanation

This email could be a phishing scam, where you get a message that looks like it’s from someone you know, asking you urgently for sensitive information. Before responding, call Human Resources and confirm they sent the message.

An email from your boss asks for the name, addresses, and credit card information of the company’s top clients. The email says it’s urgent and to please reply right away. You should reply right away. True or False?

• True

• False

Answer explanation

It may be a phishing attempt. Check it out first and confirm whether the request was really from your boss.

You get a text message from a vendor who asks you to click on a link to renew your password so that you can log in to its website. You should:

• Reply to the text to confirm that you really need to renew your password.

• Pick up the phone and call the vendor, using a phone number you know to be correct, to confirm that the request is real.

• Click on the link. If it takes you to the vendor’s website, then you’ll know it’s not a scam.

Answer explanation

Before you click the link, make sure the text is legitimate and the request is real. Otherwise, clicking on the link could download malware or expose company credentials.

If you fall for a phishing scam, what should you do to limit the damage?

• Delete the phishing email

• Unplug the computer. This will get rid of any malware

• Change any compromised passwords

Answer explanation

Among other steps, if you fall for a phishing scheme, you should immediately change any compromised passwords and disconnect from the network any computer or device that could be infected with malware because of the phishing attack. This will help limit the damage.

• Phishing

• Legitimate

• Don't know

• Phishing

• Legitimate

• Don't know

• Phishing

• Legitimate

• Don't know

• Phishing

• Legitimate

• Don't know

Why do I need to watch out for phishing emails?

• For personal safety and security.

• To protect your identity and sensitive information.

• To prevent being duped and falling for scams.

• All

What should you do if you’re unsure whether an email is real?

• Ignore the source and proceed anyway.

• Click on the link/download the attachment to find out.

• Learn and educate yourself with security awareness training.

• Forward the link to friends/colleagues and ask them if it’s trustworthy.