<aside> 🚨

This article will help mitigate phishing risks and ensure the IT team can act swiftly to protect the organization.

</aside>

<aside> ⏩

Easily create an IT ticket in Slack. Type /assist (or /halp / /helpdesk / /support) anywhere in Slack and attach the original email as a .eml file. Do not email a leftover helpdesk address.

</aside>

1. Identify Suspicious Emails or Messages

• Look for common phishing red flags:
  • Unfamiliar sender address or domain (e.g., mismatched company name).
  • Urgent or threatening language.
  • Requests for sensitive information like passwords or payment details.
  • Unexpected attachments or links.
  • Generic greetings like “Dear Customer” instead of your name.

2. Do NOT Interact with the Email

• DO NOT click on any links or download any attachments.
• Avoid replying to the email.
• Take a screenshot if possible, to document the phishing attempt.

3. Report to IT

• Open Slack and run /assist (or /halp / /helpdesk / /support). Attach the original email as a .eml so headers are preserved. Do not email a leftover helpdesk address.
• In Mail app: drag the message onto your desktop or use Save As to get a .eml, then attach it on the Assist form.
  • In Gmail: Open the email → Click More Options (three dots) → Download message (.eml), then attach that file on the Assist form.

4. Flag the Email

• If your email client supports it, mark the email as Phishing or Junk:
• In Gmail: Click More Options (three dots) → Select “Report Phishing.”

5. Wait for Confirmation from IT

• IT will review the reported email and provide feedback. Follow any additional steps they recommend, such as resetting passwords or updating security software.

6. Educate Yourself on Phishing

• Stay informed by reviewing company-provided resources or attending cybersecurity training sessions.
• If you’re unsure about an email, consult your IT team before taking any action.

7. Follow Up (if necessary)

• If you suspect that sensitive information has already been compromised, notify IT immediately and follow their instructions for damage control.