 |
WARNING: You just fell for a Phishing Email |
 |
What is Phishing?
Phishing refers to a sending an e-mail which tricks a person into clicking on a
link, opening an attachment, providing their credentials, or getting them to take an action.
Why Should You Care?
Clicking on links in phishing e-mails, or filling in confidential information on
malicious websites, puts your work or home computer, and data, at risk. It can even bring down entire networks.
Why Are We Sending Simulated Phishing Emails?
Phishing tests are designed to help you, and the company, learn to identify and avoid Phishing emails.
The lessons learned apply not only to work but also to your personal email. The goal is to help everyone at AmeriTex be able to quickly identify and avoid Phishing emails.
What’s Safe To Do, And What Isn’t?
There is very little risk in simply opening e-mails. In almost all cases,
opening an e-mail will not result in compromise.
The risk is in clicking on links or opening attachments. Attackers can e-mail
you infected attachments which install malicious software, or “malware” for short.
Clicking on a link can take you to a website which steals login or other valuable
information. The website could also install malware on your machine without your
knowledge.
How Can You Spot a Phishing E-Mail?
When using an Email client, be wary of senders you do not recognize. Here are some telltale signs:
- Bad spelling and grammar: Simple phishing emails are often poorly
written. If the content of the e-mail doesn’t line up with what you’d expect from
the sender, beware! - Deceptive links: Move your mouse over any of the links in the e-mail,
without clicking. You should see the address where the link will take you.
If it’s an e-mail from your bank, but the link doesn’t display your bank’s
website, don’t click. - Sense of urgency: Is the e-mail claiming that you were charged an
extraordinary amount on your cell phone bill, or telling you your e-mail account
has been suspended? Be careful – somebody may want to push your buttons so you
click on a malicious link. When in doubt, pick up the phone. - No name in e-mail: Is an e-mail starting with Dear Customer but
not incuding your real name? Chances are the fraudster doesn’t even know who this
e-mail account belongs to. Don’t click.
If you receive any “phishy” emails, please forward them to your IT department,
asking them to analyze the e-mail and contact the authorities.