Techserye session 1 take 2

A senior crewing officer receives an email that appears to come from the Principal’s crewing desk with subject “URGENT: Finalize Crew Passport Submission (deadline 2 hours).” The message includes a PDF preview named “Crew_Passport_List.pdf” that opens in the browser and immediately shows a login form asking for the company SSO credentials to “view protected documents.” The email footer lists a familiar Vessel Manager's phone number and an official-sounding reference code, but the actual link domain (hidden behind the PDF preview) is a non-company URL that loads a page visually identical to the legitimate crewing portal. No SMS or call accompanies the message.

• A. Phishing

• B. Smishing

• C. Vishing

• D. Quishing

A recruitment assistant receives this SMS on her personal phone from a Philippine short code that reads: “DMW urgent: Your crew medical roster requires confirmation to avoid deployment delay. Validate now: bit.ly/DMWcheck.” The short link, when previewed, shows an obfuscated long string and the SMS uses an urgent, work-related phrasing that mentions a crew member’s first name. There is no email or phone call from DMW; the message arrives during non-office hours and pressures immediate action.

• A. Phishing

• B. Smishing

• C. Vishing

• D. Quishing

The finance manager receives an email at 2:00 AM titled “Principal’s Urgent Payment Advice.” The message requests immediate wire transfer to a new beneficiary bank account and includes an official-looking PDF letterhead. At 2:10 AM, the same manager gets a call from an international number asking if the transfer has been completed. Identify what type of attack this is.

• A. Phishing

• B. Smishing

• C. Quishing

• D. Phishing + Vishing

During lunch, an admin clerk finds a sealed envelope left on her desk labeled “For HR Only – MARINA Confidential Update.” Inside is a one-page printed memo with a QR code directing to “marina-verify.org.” When scanned, the QR requests login with company email. No official email accompanies the paper.
Identify what type of attack this is.

• A. Phishing

• B. Smishing

• C. Vishing

• D. Quishing

Near payroll cutoff, you receive a call from a woman introducing herself as the wife of one of your deployed seafarers. She sounds distressed and explains that her husband was rushed to the hospital overseas and urgently needs his allotment redirected to a different bank account “for medical expenses.” She gives the correct crew ID number, date of birth, and even the last 4 digits of his current account (information that could have been leaked). She insists the change must be made today and says she will send a follow-up email if needed.

• A. Approve the change since she provided personal and banking details that match records.

• B. Ask her to send a scanned copy of her ID via email and process the request to show compassion.

• C. Tell her the request will only be processed once the seafarer himself confirms through official company communication or a signed allotment change form is submitted, and escalate the case to your supervisor.

• D. Make a partial change (temporary transfer to the new account) until proper documents are provided.

In some cases, staff members allow cadets or colleagues to use their own MPIP account so that tasks can be finished faster. This means more than one person is using the same login. Why is this not a good practice?

• A. It is fine as long as the work gets done.

• B. It makes it impossible to know who really made the changes, which removes accountability and increases the risk of errors or misuse.

• C. It is acceptable if the staff trusts the cadet.

• D. It saves time, so the benefits outweigh the risks.

You receive a text message:
“POEA Update: Please click this link to confirm the new passport details of your crew.”

What will you do?

• A. Click the link since it’s urgent for the crew

• B. Ignore the text and verify directly with POEA’s official website or personel

• C. Forward the text to your coworkers so they can act faster

• D. Open it using your personal phone just to check

A seafarer calls:
“Good afternoon, Ma’am/Sir. This is 3/O Dela Cruz. Please update my allotment account to this new bank number immediately so my family can receive money faster.”

What should you do?

• A. Accept the request since it’s directly from the crew and note the new account number for faster processing.

• B. Tell the seafarer to also send the request by email so you have a record before making the change.

• C. Politely explain that allotment changes can only be processed through official written procedures with supporting documents and manager approval.

• D. Temporarily update the account so the family doesn’t experience delay, then finalize once paperwork is submitted.

Which is the safest password practice?

• A. Use your birthday for easy recall

• B. Use one strong password for all accounts

• C. Use a mix of letters, numbers, and symbols for each account

• D. Share your password only with your manager

Your cousin asks:
“Pwede ba pahiram ng office laptop mo? I just need to use it for my online school project for 2 days.”

What should you do?

• A. Allow it since it’s just schoolwork and family can be trusted.

• B. Let them use it but log out of your work accounts first.

• C. Decline politely and explain that company laptops are strictly for official use only, even with family.

• D. Lend it but ask them not to connect to Wi-Fi to avoid risk.