Defense PlaybookAgainst Phishing E-mails

From: Web Mail Up-grade Team [mailto:hachazie@drhe.hu]

Subject: Account Maintenance

Sent: Friday, September 14, 2016 9:27 AM

Dear Customer,

We would like to inform you that we are currently carrying out scheduledmaintenance & upgrade of our web mail service and as a result of this; our ,client has been changed and your original password will reset. We are sorryfor any inconvienence.

To maintain your account, you must reply to this email immediately& enter your current password here [XXX].

Failure to do this within 48 hours will immmediately render youraccount will be deactivated from our database.

Thank you for using the web mail, account!

©WEB MAIL, ACCOUNT ABN 31 088 377 860 All Rights Reserved.E-Mail Account Maintenance [webcontrolteams13@gmail.com]

#secureblue

www.uky.edu/its#CyberAware

#1 & #7

#2

#3#4

#5

#4

put yourguard up

·Stay in the zone

·Defend #1 - #7·Confirm graphicsmatch legitimategraphics of theorganization·Protect Yourself·Verify that eache-mail is genuine

Suspicious linksor fake e-mailaddresses

Genericgreetings

#1

#2

#3

#4

E-mails written inpoor grammar withmisspelled words

A sense ofurgency andthreats

Asking forpasswords &other credentials#5

#7Sender email addressthat does not matchcompany standardemail address

Links andURLs that donot match #6

#1 & #6