Phishing Training And How To Report It.
Phishing Training
This document will go over how to avoid phishing. During your tenure at CalArk you will receive many phishing attempts. These attempts will come from both Malicious entities who want to steal your data, and as training from CalArk International.
- What Is Phishing?
- Phishing attacks come from scammers disguised as trustworthy sources.
- They can facilitate access to all types of sensitive data.
- As technologies evolve, so do cyberattacks.
- Common Types of Phishing:
- Email Phishing:
- The most common form of phishing.
- Uses tactics like phony hyperlinks to lure email recipients into sharing personal information.
- Attackers often masquerade as large account providers (e.g., Microsoft, Google) or coworkers.
- Malware Phishing:
- Involves planting malware disguised as trustworthy attachments (e.g., resumes, bank statements) in emails.
- Opening such attachments can paralyze IT systems.
- Smishing (SMS Phishing):
- Sends text messages disguised as trustworthy communications (e.g., from Amazon, FedEx).
- People are vulnerable to SMS scams due to the personal nature of text messages.
- Vishing (Voice Phishing):
- Fraudulent call centers trick victims into providing sensitive information over the phone.
- Social engineering may lead victims to install malware via deceptive apps.
If you see an email that is phishing, you can report it using the Phish Alert Report button at the top right of the outlook page. If you are useing outlook new the Phish Alert Report will be along the right side of the email after you open it. (Email Phishing example & how to report via mobile on Page 2)
If you’re on mobile, you will need to open the email before you can report it.
1. First open the email by clicking on it. (Be sure not to click on anything else in the email by accident)
2. Click on the 3 dots pictured to bring up settings.
3. Now click on the Phish Alert button.
Below is a real-world example of a phishing email.
· Make sure the sender has a legitimate email address
· Hover your mouse over links to view the URL and see if it’s sending you to a legit/safe site or somewhere malicious. (DON’T CLICK THE LINK!!!)
