Your company is participating in a Cyber Security Education Program.
This Unsubscribe Phishing Attack included the following social engineering techniques:
- Newsletter type emails which are ubiquitous.
- Topic (example: job search) you wouldn't want your co-workers or employer to see.
- Use of your name to customize the email.
- Use of spoofed domain (example: vancouverjobsshop.ca) to resemble/sound like a legitimate company you might be familiar with.
- Simple clean email to minimize suspicion.
- Many hyperlinks so you can "Unsubscribe" or continue to investigate.
How to spot this was a phishing email:
- Was this an email you expected to receive? No - Be cautious
- Did you recently subscribe to a newsletter or service?
- Legitimate services would require you to confirm your email.
- The sender named email address was generic.
- Brining up browser and typing in domain used isn't valid (example: jobs@vancouverjobsshop.ca).
- The link provided used suspicious domain similar to above.