CCPSD SIMULATED PHISHING EXERCISE

Attention,

You have fallen for an authorized simulated email phishing attack coordinated by CCPSD and the Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA).

What is a Phishing Attack?

Phishing is a form of social engineering. Phishing attacks use email or malicious websites to solicit personal or company information by posing as a legitimate organization. For example, an attacker may send email seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts. Attackers may use these same methods to obtain information about an organization in an attempt to compromise its computer systems.

What Should You Do Now?

First, please do not share with others that an email phishing campaign is underway. CCPSD's information security team would like to receive an accurate assessment during this campaign.

Second, no one will be individually identifiable during this campaign. The Department of Homeland Security is conducting this campaign and does not reveal individual email identities. Our objective is only to educate.

Finally, do you know where to report suspected phishing attacks within your organization?

What should you do when you receive a phishing email?

1. Go to your organization's email account.

2. Open the suspected email (do not click on any links within the email).

3. Next to the Reply arrow on the right, click the three dots.

4. Click "Report Phishing"

This will alert your organization's technology department.