<aside> 🚨

This article will help mitigate phishing risks and ensure the IT team can act swiftly to protect the organization.

</aside>

<aside> ⏩

Easily create an IT ticket by forwarding any email to:

**[email protected]**

</aside>

1. Identify Suspicious Emails or Messages

• Look for common phishing red flags:

• Unfamiliar sender address or domain (e.g., mismatched company name).

• Urgent or threatening language.

• Requests for sensitive information like passwords or payment details.

• Unexpected attachments or links.

• Generic greetings like “Dear Customer” instead of your name.

2. Do NOT Interact with the Email

• DO NOT click on any links or download any attachments.

• Avoid replying to the email.

• Take a screenshot if possible, to document the phishing attempt.

3. Report to IT

• Forward the suspicious email to your IT department’s ticketing system directly **[email protected]**

• Use the “Forward as Attachment” feature in your email client to ensure headers are preserved.

• In Mail app: Right-click the email → Select “Forward as Attachment.”

• In Gmail: Open the email → Click More Options (three dots) → Select “Forward as Attachment.”

4. Flag the Email

• If your email client supports it, mark the email as Phishing or Junk:

• In Gmail: Click More Options (three dots) → Select “Report Phishing.”

5. Wait for Confirmation from IT

• IT will review the reported email and provide feedback. Follow any additional steps they recommend, such as resetting passwords or updating security software.

6. Educate Yourself on Phishing

• Stay informed by reviewing company-provided resources or attending cybersecurity training sessions.

• If you’re unsure about an email, consult your IT team before taking any action.

7. Follow Up (if necessary)

• If you suspect that sensitive information has already been compromised, notify IT immediately and follow their instructions for damage control.