Your company is participating in a Cyber Security Education Program.


This Certificate Renewal Phishing Attack included the following social engineering techniques:


  1. Subject to appear critical or official (example: Certificate Renewal)
  2. Time bound / Urgent email (example: ... expire in 24 hours.)
  3. Limited and simple content to minimize detection by email filters.


How to spot this was a phishing email:



  1. From email address is some random domain not associated with your company or any software product used.
  2. The link provided references a domain not associated with your company (example: certificate.lang-en.ca)
  3. This email was/may have been filtered and in your junk mail folder.


“An employee is either an asset to your cyber security or a risk.”