Phishing
What is a phishing email?
What is: an email tries to trick you into clicking a malicious link or sharing sensitive information
What is Multi-Factor Authentication (MFA)?
What is: security measure that requires more than just a password to log in
Eg LAWA uses Okta
How to use a URL or web address?
What is: you should verify this before clicking a link in an email
What is impersonation?
What is: Cybercriminals use this tactic by pretending to be a trusted person
What is report it?
What is: when you think an email is suspicious, the first thing you should do is this
What are phishing red flags?
What is: unexpected urgency, suspicious links, and requests for credentials are examples of red flags
What is strong password hygiene?
What is: a best practice of using a unique, complex password for every account
Examples include: #, Capital letter, special symbols, etc
What is the padlock icon?
What is: an icon that indicates a website is using encrypted HTTPS communication
What is social engineering?
What is: Eg when an attacker calls pretending to be IT Support and asks for your password
Never give out your password
What is a cybersecurity incident?
What is: any event that jeopardizes the confidentiality, integrity, or availability of information or systems, or violates security policies—whether the harm is actual, imminent, or merely potential
Tip: early reporting helps prevent this from spreading across the organization
What is vishing?
What is: a phishing attack conducted through a phone call
What is a password manager?
What is: a tool that securely stores and generates passwords
What is a malicious QR code attack?
What is: scanning unknown QR codes can expose you to this cyber threat
What is baiting?
What is: a type of social engineering where attackers exploit human curiosity by offering something desirable — such as free software, a prize, a discount, or a “lost” device — to entice the victim into performing an action that compromises their system, malware infections or data theft
Eg Gifting a streamer/influencer a keyboard and once plugged in stealing your bank information
What is the golden window?
What is: when a cyber incident occurs, the first few hours after discovery are often referred to as this critical response period
What is spear phishing?
What is: a type of phishing that targets a specific individual or department
What is credential stuffing?
What is: using the same password on multiple accounts which can lead to this risk
What is malware?
What is: software that automatically installs without your knowledge after clicking a malicious link
What is pretexting?
What is: a social engineering technique that creates a believable but false story to obtain information
What is a security-conscious culture?
What is: the phrase "if you see something cyber, say something" is an example of this type of workplace culture.
infosec@lawa.org
What is a business email compromise (BEC) scam?
What is: when you receive an email from your "CEO" requesting gift cards immediately
What is a dictionary attack?
What is: a type of attack that attempts to guess passwords using common words, phrases, and leaked password lists
What is a VPN?
What is: Virtual Private Network, a service that creates a secure, encrypted connection over the internet, protecting your data and privacy while allowing access to restricted content
Public Wi-Fi users should avoid accessing sensitive systems without this protection
What is trust?
What is: exploiting human trait more than technology itself
The game is over, please complete the Cyber Security Training by scanning the QR code or by visiting
What is a security-first culture?
What is: a principle that cybersecurity is everyone's responsibility, not just the IT department's.