That’s why it’s one of the most critical threats to mitigate and the most difficult since it requires human defenses. It only takes one person to fall for phishing to incite a severe data breach. Phishing continually evolves to bypass security and human detection, so organizations must continually train staff to recognize the latest phishing strategies. Only later do they recognize the warning signs and unreasonable demands. Users tricked into an attacker’s demands don’t take the time to stop and think if demands seem reasonable. An attack is facilitated by communicating a sense of urgency in the message, which could threaten account suspension, money loss or loss of the targeted user’s job. The more aspects of the message that mimic the real company, the more likely an attacker will be successful.Īn attacker’s goals vary, but usually, the aim is to steal personal information or credentials. An attack is disguised as a message from a legitimate company. Official communications from UTC will come from an email ending in Communications from IT may also come from emails branded as TeamDynamix.Whether a phishing campaign is targeted or sent to as many victims as possible, it starts with a malicious email message. Inconspicuous typos in the sender's email.

Senders that claim to be your colleague or a company having at the end of their accounts.Subjects asking you to call or text someone.Vague subjects such as, 'Hello' and 'Re:'.Always question what an email is requesting from you. Generic signatures that are attempting to impersonate a UTC employeeĪs a rule of thumb, IT will never request you to verify your UTC account or ask for your password.Requests to verify your account for websites you are not familiar with.Links to documents in Drop Box, Google Docs, OneDrive, or SharePoint.Messages that induce panic, such as a purchase on an account, account deactivation, or a traffic ticket.The following are factors to consider when you are suspicious of an email: Message contents:

Latest phishing emails