Northwind
← Back to journal

Phishing Season: Five Signs to Watch For

Most attacks still start with an email. These five signs help you spot them.

by Tobias Krüger

In our last quarterly simulation, 7 percent of recipients clicked the link. That is better than last year, but one real click is enough for an attacker.

What to look for

Be careful with unexpected urgency, sender addresses that are almost right, links whose target does not match the text, requests for credentials, and attachments you did not ask for.

If in doubt, do not click. Open the service directly in your browser instead of following the link.

Forward suspicious emails as attachments to phishing@example.com. If you already entered your password somewhere, report it within one hour to security@example.com or call the hotline at +49 69 1234 5678.