Your company is participating in a Cyber Security Education Program.


This Company Notice Phishing Attack included the following social engineering techniques:


  1. Corporate all hands email: (subject: "Priority Press Release.")
  2. Timing critical (example: Please read ... before the end of the day.)
  3. From email name used as subject to mask fictious email address ("Company Confidential.")
  4. Limited information provided to make you curious and entice you to click the malicious link.


How to spot this was a phishing email:


  1. Was this an email you expected to receive? No - Be cautious
  2. Confirm with management or human resources.
  3. Always review sender email and determine if suspicious (example: internal-email@192-168-1-30.com)
  4. The primary domain (192-168-1-30.com) is not associated with the company.
  5. This email was/may have been filtered and in your junk mail folder.


“An employee is either an asset to your cyber security or a risk.”