As you may already know, every so often, ITS throws a phishing test into the wild to see what happens. Sometimes, the WCM community is quick to identify a phishing attempt and doesn’t click on any links that look suspicious. Other times… well…
To be fair, we are purposefully trying to be tricky.
Overall, though, we’ve seen an increasing number of people not only ignoring phishing attempts, but also actively trying to report them – and we definitely appreciate those reports! Here’s the best way you can report suspected phishing emails to ITS:
Use Phish Alarm
If you suspect phishing in your inbox, try using the Phish Alarm feature in Outlook.
When you use Phish Alarm, it sends your suspicious email directly to our Security team, which analyzes each submission for potential threats. If there is a malicious link or attachment, you’ll be notified and the offending email will be quarantined from your inbox. You’ll also receive a notification if the email is safe.
Check out our Phish Alarm video to learn where it is in your Outlook account:
What do I do if I suspect phishing in a personal email account?
Good question! Aside from using the spam button in your personal email account, you can also report potential email scams to local and federal government agencies.
I think I fell for a phishing scam and now I’ve been hacked. *increasing panic*
No need to breathe into that paper bag just yet! If you think your WCM account has been compromised, contact ITS immediately at (212) 746-4878 and change your password. Our security team will walk you through what you need to do.
If you suspect your identity may have been stolen, report it immediately at www.identitytheft.gov.
Other great phishing resources
Did you try our pop quiz yet?
Try our 10-question pop quiz on cybersecurity. We’ll announce some winners on Oct. 15.