How to Identify Phishing Emails

There are so many email cybersecurity events, yet the most commonly frequented is the Phishing Email.

What is a phishing email? It's a disguised email designed to trick users

into divulging personal or company information or deploy malicious software (i.e. computer viruses).

Just the way it sounds; it's fishing for a user to take the bait. We've all encountered them at one time. There are a few ways to determine if one is attached to a rod n reel. Here's how:

1. Claims there is a problem with your account or your payment information
2. Asks you to confirm personal information
3. Includes a fake invoice
4. Asks you to click on a link to make a payment
5. Claims that you are eligible to register for some kind of government refund
6. Offers you coupons for free stuff

If you suspect an email might be a phishing confirm by looking for:

• The email asks you to provide personal information

• The domain name and email address don't look genuine

• A Framework tech once found the email domain ending in: @m!crosoft.com

• It's poorly written.

• Emails from companies requesting payment or information are carefully constructed and written.

• Suspicious Attachments; Do NOT open the attachment under any circumstance.

• If you have any other of the indicators that the email may be a Phishing one, the attachment is most likely malicious!!

• The use of alarming subject lines to play on emotions

• HELP!!! """IMPORTANT""", """MUST RESPOND IMMEDIATELY"""

Once you've identified a phishing email take the following steps:

1. Mark the mail as Junk and completely delete it from your mailbox, to include your deleted emails folder.

2. Notify your MSP (Framework IT) and forward us a copy of the email.

3. If you are still unsure as to whether it's a legitimate email call the person who sent it to confirm whether they sent it or not If you don't know the person, it's best to air on the side of safety.