Protect Yourself and Your Organization from Cyber Threats
Welcome to the Phishing Awareness Training. In today's digital landscape, the human element is often the weakest link in cybersecurity. Phishing is a primary tool for cybercriminals to gain unauthorized access, steal data, and cause financial harm.
This module is designed to equip you with the knowledge and skills to identify, avoid, and report phishing attempts effectively.
The most common form. Mass emails sent to thousands, hoping someone clicks a malicious link or opens an attachment.
A highly targeted attack directed at a specific individual or organization. Attackers often use personal details to gain trust.
Spear phishing aimed at high-profile targets like C-level executives (CEO, CFO, etc.) to steal sensitive corporate data.
Phishing via SMS (Smishing) or phone calls (Vishing). Scammers impersonate banks or government agencies over the phone.
Language like "Act Now!", "Immediate Action Required", or "Account will be suspended" is a classic tactic to make you panic and act without thinking.
The display name might look legitimate, but the actual email address is often slightly misspelled or from an unrelated domain (e.g., support@amazon-security.net).
Always hover over links before clicking. If the URL shown in the bottom corner doesn't match the text or the expected destination, it's a trap.
Professional organizations rarely send emails with blatant spelling errors or awkward phrasing.
Attackers sent an email that looked like a genuine Google Docs invitation. When users clicked "Open in Docs," they were taken to a real Google sign-in page, but they were actually granting a malicious app (named "Google Docs") access to their entire email account and contacts. It spread to over 1 million users in hours.
An Austrian aerospace parts manufacturer, FACC, lost about €42 million when an employee in the finance department received an email supposedly from the CEO. The email instructed the employee to transfer money for a "fake" acquisition project. This is a classic example of whaling and social engineering.
During the pandemic, scammers sent millions of emails and texts impersonating government health organizations (like the WHO or CDC) and tax authorities. They promised stimulus checks or health updates to trick people into downloading malware or providing personal social security numbers.
Loading question...
This award is presented to
For successfully completing the
Social Engineering Tactics
Social engineering is the art of manipulating people into divulging confidential information.
Pretexting
Creating a fabricated scenario (the pretext) to trick a victim into providing information. For example, "I'm from the IT department and I need your password to fix your computer."
Baiting
Promising an item or good to entice victims. It could be a free movie download or a USB drive left in a public place labeled "Executive Salary Updates."
Quid Pro Quo
A "favor for a favor." An attacker might call claiming to be technical support, offering a "quick fix" for a non-existent problem in exchange for login credentials.