Your company is participating in a Cyber Security Education Program.


This All Staff Health Phishing Attack included the following social engineering techniques:


  1. All Staff from email "Name" to trick user into thinking it was sent to all staff.
  2. Subject to appear critical or official (example: Office Health Notice)
  3. Topical subject (example: Cold and Flu Season.)
  4. Limited and simple content to minimize detection.


How to spot this was a phishing email:


  1. From email name is "All Staff"; if your company uses "All Staff" it would be the To email.
  2. From email address is some random domain not associated with your company.
  3. The link provided references a domain not associated with your company or official health organization (example: bc-en.ca)
  4. This email was/may have been filtered and in your junk mail folder.


“An employee is either an asset to your cyber security or a risk.”