Campaign: How to Spot a Phishing Email

1. You receive an e-mail from your bank in which you are asked to click on a link to share your internet banking login information - i.e. username, password, one-time password (OTP). The rationale given is : “We notice suspicious activity in your account and need to verify your identity. Else, your accounts will be frozen effective immediately.” What will you do?

Untitled multiple choice field

Click on the link and share all the required details

Call the bank customer service hotline and clarify

Share the link to your friend and ask him to click it

None of the above

2. On Monday morning, your manager emails you to open a pdf document containing information about your next performance appraisal. You have never received such an email before as your manager usually talks about it before scheduling a 1-1 conversation on performance. Should you open the pdf document?

Untitled multiple choice field

Yes

3. You are tired of your current job. It’s been years that you are toiling away and feel like there is no prospect for growth. You have also been liking, re-posting content about career growth on LinkedIn. Today, you receive an email from LinkedIn about new career opportunities and roles that you are eligible for. All the roles are relevant and appear exciting. However, normally this kind of email is sent to your personal email address, but you got this one in your work inbox. What should you do?

Untitled multiple choice field

Click the link and learn about the new roles available

Share the email with your colleague who is equally frustrated in current role

Save the email for reference later

Report this email as spam

4. An email arrives in your company inbox that seems to be from one of your team’s vendors. It asks you to click on a link to update your business account. Should you click?

Untitled multiple choice field

No, I should verify if this email is really from the vendor I work with

Yes, I know and trust this vendor

5. Which one of these statements is correct?

Untitled multiple choice field

You can open links in an email that looks like it’s from someone you know, as long as you have anti-virus protection and a spam blocker

You can trust an email really comes from a client if it contains the client’s logo and has information about the client that you know to be true.

Last evening, an email arrived from the IT Admin department asking you to provide personal information right away to update some business accounts. You should check it out first to make sure they are who they say they are.

Your colleague messages you to ask for the password to an account you both use frequently. You should give it right away.

6. Email authentication can help protect you against phishing attacks.

Untitled multiple choice field

True

False

7. You have clicked on a link from an email that you later realized is suspicious. What should you do?

Untitled multiple choice field

For sensitive accounts related to this email id, change passwords

Inform the IT department by escalating this suspicious email

Scan your computer, from which you opened this email, for malware, viruses

All of the above

8. You have decided to become a digital nomad and work from Bali for a quarter. The day after you have arrived in Ubud and settled into your favorite AirBnB location, you decide to login to your email account to check on work matters. As you enter the URL to navigate to your work email login address, you are directed to a page that looks very similar to your work account’s email login page, but the placement of the logo and some text appear off. What should you do?

Untitled multiple choice field

Go ahead and enter your login credentials, continue as normal

Inspect the url closely, proceed only if the connection is on HTTPS and the url is exactly matching your workplace’s email login address

Ignore the warning signs and login

None of the above, forget about being a digital nomad. Go enjoy the padi fields of Ubud

9. Changing passwords frequently is important to safeguard my email account.

Untitled multiple choice field

True, because an attacker will be confused if I vary my passwords

False, I should set up multi-factor authentication in addition to periodically updating my email password

10. Relying on my email provider’s advanced spam, phishing email filtering technologies is sufficient for the security of my email account. I do not need to take any further actions on my own.

Untitled multiple choice field

True

False