How to Identify a Phishing Email

Click/Tap an image to enlarge it.

How to Identify a Phishing Email

• Phishing attempts happen 24/7, Stay informed with the following information to create a safer work environment.

• Phishing Emails come in many forms, look for these common signs to get a better feel for how attackers may try to trick you:
  1. Urgent or emotionally appealing language, especially messages that claim dire consequences for not responding immediately
  2. Requests to send personal and financial information
  3. Untrusted shortened URLs
  4. Incorrect email addresses or links, like amazan.com
     A common sign used to be poor grammar or misspellings although in the era of artificial intelligence (AI) some emails will now have perfect grammar and spelling, so look out for the other signs.
      
• When hovering over a link within an Email you will notice at the bottom left and you will see a URL or website link, you can use this to verify the link you are about to click will send you to the correct website. Attackers can trick you by showing what appears to be a legitimate website link but instead has been changed to a malware-infested website. In this example, you will notice the two website links do not match up meaning it could be a Phishing attempt. 

• Being able to identify phishing attempts is an invaluable skill that could very well make you the hero of our organization.

• Attackers may also use AI chatbots to gain information.

• These AI bots can pose as real people and lull you into a false sense of security.

• Attackers can even disguise themselves as co-workers or even your boss. Watch out for surprising emails from co-workers asking for information or money, it may just be an attacker. Confirming with a co-worker in person is a good solution to verify suspicious emails. This means you must always be skeptical and vigilant because attackers will do anything they can to steal, prod, and pry crucial information from you.
   
• Lastly, but most importantly, always report phishing emails. By flagging suspicious emails, individuals can help security teams analyze and respond to these threats, preventing further harm and improving overall online security. 
   
• Additional Resources: 
  • https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
  • https://www.cisa.gov/secure-our-world/recognize-and-report-phishing