Anti Phishing Training |

Anti Phishing Training

This form is for our team members to complete to ensure they've reviewed common Phishing Tactics and how to avoid them.

Step 1 of 4

25%

Name

This field is for validation purposes and should be left unchanged.

Anti Phishing Training

Welcome to our Anti Phishing Training. In this course we'll cover the different types of Phishing Schemes, How to spot them, and what do when you get an email you suspect is a phishing scheme.

This training should take ~20min to complete.

Make sure to answer questions carefully. You'll need an 80% to pass. Once you pick an answer, you will receive immediate feedback, which will be locked in.

Who are you?

To ensure team members complete the training - please provide your name and company email below.

Name(Required)

First Last

Company Email(Required)

What is a Phishing Email?

Let's review the basics about Phishing Schemes and some common types of Phishing Schemes.

Test Your Knowledge

What is a Phishing email?(Required)

A type of malware that targets small time bait shops

An email from Facebook

A type of social engineering where a fradulent message is sent to a victim disguised as a trusted source.

How much money did Facebook and Google lose to a Phishing Campaign between 2013 and 2015(Required)

(Hint - its in the video)

50 Million

30 Million

100 Million

1 Billion

What is Spear Phishing?(Required)

A Phishing scheme where the scammers do research on the user before sending a phishing attempt

A Phishing scheme that is paired with a DDOS attack

A Phishing scheme that deals 1d6 piercing damage on hit.

What is Pharming?(Required)

A Farming tool

A type of Phishing that focuses on mimicking trusted websites as closely as possible.

A Phishing scheme that only targets Pharmaceutical companies.

How to Spot a Phishing Email

Now that we know the basics of Phishing. Lets talke about how to avoid being a victim of a phishing scheme.

Test Your Knowledge

True or False : Scam emails often contain spelling mistakes and grammatical errors(Required)

True

False

You receive an email with an attachment you weren't expecting labeled 'receipt'. What should you do?

Forward it to you department and ask someone else to open it.

Do not open the attachment

Open it to confirm if its malicious

True or False : So long as an email has the companies logo in it. Its probably legitamate

True

False

The Takeaway

Let's review and go over the key strategies to avoid being a victim of phishing.

Phishing, at its core, is a common Social Engineering Tactic.

Social engineering is a term used for various malicious activities accomplished through human interaction. It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information.

This means that as we grow our human firewall needs to be just as strong as our virtual firewalls.

Let's review the some important guidelines to follow to keep your information safe.

Phishing schemes don't end at work. Use these tools for your own personal life as well.

Lets review some of the best ways to keep yourself safe from Phishing schemes.

Don’t install unauthorized software
Never give your login credentials in a request to an email or link sent from an email.
Never click on links from a supsicious or unexpected email. You can hover over links to preview them.
Always be suspicious of emails arriving from unexpected senders
Always verify the email address of the sender of any received email. Be suspicious of any email claiming to be from a previously trusted sender that arrives from a previously unknown email address
Treat all unexpected file attachments as potentially suspicious. Call the sender at a predefined phone 11 number to verify if he/she intended to send the included file attachment before opening
Never allow scripts, macros, or other “active content” to run when opening a file attachment from an email.
When in doubt about an email or unexpected request in an email, call the sender at a predefined phone number
Never install software offered by a third-party website. If you are told a particular type or version of software is needed, always visit the official vendor’s website to install the software.

What do I do if I receive a Phishing Email?

When you receive a Phishing email, you should be able to use the guidelines outlined in this course to identify if it's suspicious.

How to Report Phishing in Outlook Got an obvious Phishing email? Use the report phishing action in outlook to report it and automatically make our firewall stronger!

Right-click on the email in your emails pane and then select Report >> Report as Phishing.

What if Im not sure if an email is phishing or not? Message an IT admin and ask them to review the message. Chances are if you have to ask - its a scam.

What do I do if I fell for a phishing scam? First of all, tell your IT Admin immediately.

You'll then be required to change any compromised passwords and provide specific detail on what information was provided.

Wont I get in trouble? Everyone is human; you won't be in trouble for falling for a Phishing scheme. But informing IT immediately is the best way to ensure we can avoid the mistake and learn from it.

Test Your Knowledge

What is a Phishing Scheme?(Required)

A type of email attack that only happens to businesses

Fishing but more basic because the ph is higher.

A type of hacking software that uses multiple requests to take down a server

A Type of Social Engineering, relying on human interaction to breach security

Situation : An email from your boss asks for the name, addresses, and credit card information of the company’s top clients. The email says it’s urgent and to please reply right away. Should you reply with the information requested?(Required)

Yes

Your office admin emails you saying that he needs your password for your office account. Do you send them the password?(Required)

Yes

Situation : You get a text message from a trusted vendor who asks you to click on a link to renew your password so that you can log in to its website. You should....(Required)

Reply to the text to confirm that you really need to renew your password.

Click on the link. If it takes you to the vendor’s website, then you’ll know it’s not a scam.

Pick up the phone and call the vendor, using a phone number you know to be correct, to confirm that the request is real.

If you fall for a phishing scam, what should you do to limit the damage?(Required)

Buy the IT team a box of chocolates and ship them to arrive in a few days as an aplogy.

Alert IT immediately, and change any compromised passwords

Delete the Phishing Email - if its not in your inbox its not dangerous anymore

Unplug the computer. This gets rid of any malware