Name the Red Flag
Phishing Prevention
Red Flag Examples
Report Phishing
Not the Imposter
100

Attackers use this popular, well-known, logo to gain trust.

What is the Microsoft Logo?

100

Do this to safely see where a hyperlink is going.

What is hover?

100

Subject: [EXTERNAL]: Company Updates

From: Michael Smith <ceo@yourcompany.com>

Body:
Please see below for more recent company updates.


What is Imposter?

100

Button in Outlook

What is Report Phishing?

100

A. Michael Smith <msmith@hotmail.com>


B. Michael Smith <msmith@freeportlng.com>


C. Michael Smith <freeportlng@ceo.com>

What is B?

200

This Red Flag refers to an attack including a link that goes to a website unrelated to the email content.

What is a Suspicious URL?

200

If you receive an email with an attachment from an unknown sender that you were not expecting, what should you do?

What is report it?

200

Subject: [EXTERNAL]: Your Invoice from Netflix

From: Invoice <invoice@paid.com>

Body:
Thank you for paying your Netflix invoice of $15.99


Disclaimer: This email is intended to the specified recipient, if you received this email in error please contact Hulu support.

What is Company Signature Mismatch?

200

Email them to report a SMS phish.

What is phishme@freeportlng.com

200

A. Human Resources <freeportHR@gmail.com>
B. Human Resources <hr@freeportlng.net>
C. Human Resources <humanresources@freeportlng.com>

What is C?

300

You click on a link, and are lead to an unexpected login page with a suspicious URL.

What is a Suspicious Login Page?

300

Enabling this security feature adds an extra layer of protection by requiring users to provide two pieces of identification to access an account.

What is two-factor authentication or multi-factor authentication?

300

Subject: PowerPoint Presentation

From: Karina Abella <kabella@freeportlng.com>

Attachment: document.docx

Body: Please see attached PowerPoint presentation.

What is Attachment Mismatch?

300

If you keep receiving unsolicited spam from the same sender, you may do this to no longer receive emails from them.

What is Block the Sender?

300

A. Aaron Neus <aneus@freeportlng.com>
B. Aaron Neus <aneus@yahoo.com>
C. Aaron Neus <aneus@freep0rtlng.com>

What is A?

400

An email containing a PDF file named NewPolicy, but the email references a word document about Employee Benefits.

What is an Attachment Mismatch?

400

You click a link and it leads to a login page, you should do this with the URL.

What is Double Check?

400

Subject: [EXTERNAL]: VM Message new


From: lbaker@colesti.com

Body: 

You have a new Ring voice message

Message is 00:42 Mins

URL: https://www.salesforce.com

What is Suspicious URL?

400

Don't be afraid to report an email. If it is legit, the Cyber team will ______ it back to you.

What is return?

400

A. Cyber Security <cybersecurity@yourcompany.com>
B. Cyber Security <cyber@security.com>
C. Cyber Security <cybersecurity@freeportlng.com>

What is C?

500

An attacker tries to pose as your manager in order to gain your trust.

What is an Imposter?

500

Participating in this program can help educate end users to more effectively spot phishing emails.

What is CyberSecurity Awareness Program?

500

Subject: CyberSecurityNews

From: Cyber Security <cybersecurity@freeportlng.com>

Body:
Click the link below to fill out survey via Survey Monkey for an extra 100 points. Link expires in 48 hours.
UR: https://www.surveymonkey.com

What is Sense of Urgency?

500

In addition to reporting a phishing email, it's important to not do this to avoid falling victim to the scam.

What is not clicking on any links or attachments?

500

A. Michael Moppert <mmmoppert@gmail.com>
B. Michael Moppert <mmoppert@freeportlng.com>
C. Michael Moppert <moppert@hotmail.com>

What is B?

M
e
n
u