What is Phishing?
Phishing is a type of cyber attack where criminals send fraudulent emails that seem to come from a legitimate source. Sometimes, they even follow up with phone calls (vishing) or use AI-generated deepfake videos.
The goal is to trick you into revealing sensitive information, like passwords, credit card numbers, or company data.
The Consequences Are Real
A single click can have devastating effects:
- For You: Identity theft, stolen passwords, and compromised personal accounts.
- For the Company: Financial loss, data breaches, reputational damage, and legal trouble.
- For our Customers: Their sensitive information could be leaked, destroying their trust in us.
Scenario Quiz (3/5): Malware Symptoms
Your computer has been acting strangely. **Which of the following are potential signs of a malware infection?** (Select all that apply, then click Submit)
Scenario Quiz (4/5): MFA Fatigue
You're receiving an unusually high number of MFA requests you didn't initiate. **What should you do?** (Select all that apply, then click Submit)
Scenario Quiz (5/5): The Deepfake Deception
You get an email about a promotion with a video from your manager. The video looks real, but you notice slight inconsistencies. It asks you to click a link to update tax info for your "new salary". **What should you do?** (Select all that apply, then click Submit)
Quiz Complete: Key Takeaways
Phishing (Vishing & Smishing): Watch out for suspicious links, urgent requests, lack of personalization, poor grammar, and emotional manipulation. Always report, never click or reply. Hang up on suspicious callers.
Spam: Be cautious of enticing ads. The safest action is to delete the message and block the sender.
Malware: Look for slow performance, strange pop-ups, and unexpected behavior. Contact IT immediately if you suspect your device is infected.
AI-Driven Attacks: Be wary of any unsolicited communication, even if it seems to be from a familiar source. Verify all requests through official channels.
How to Report Phishing in Microsoft 365
Your vigilance is crucial. Reporting suspicious emails allows our IT team to block threats and protect everyone.
It is every staff member's duty and responsibility to report suspicious activities.
Use the "Report Message" Button in Outlook
With your Microsoft 365 E3 license, you have a powerful tool to report phishing directly within Outlook (desktop, web, or mobile):
- Select the suspicious email in your inbox.
- Look for the "Report Message" button on the Outlook ribbon (usually in the "Home" tab).
- Click it and select "Phishing" (or "Junk" if "Phishing" isn't directly available).
- Confirm your choice. The email will be sent to our IT security team for analysis and removed from your inbox.
This action directly alerts Microsoft and our security team, helping to protect the entire organization.
