Scene 1

How  much  do we know about “phishing”?

Scene 2

Scene 3

We, as employees, are an important link in  Printec’s  cyber security . 	We are frequently exposed to sophisticated phishing attacks. 	It is estimated that more than 90% of successful data breaches started with a targeted phishing attack.  	We all need to remain aware of the latest issues and threats on cybersecurity.

Icon

Description automatically generated

Scene 4

Phishing  is a type of social engineering attack often used to  steal user data , including  login credentials  and  credit card numbers .  It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message. The recipient is then tricked into clicking a  malicious link , which can lead to the installation of  malware , the freezing of the system as part of a ransomware attack or the revealing of sensitive information.

Scene 5

Typically, a victim receives a message that appears to have been sent by a known contact or organization.  The attack is then carried out either through a malicious file attachment, or through links connecting to malicious websites. In either case, the objective is to install malware on the user's device or direct the victim to a fake website.  Fake websites are set up to trick victims into divulging personal and financial information, such as passwords, account IDs or credit card details.

Scene 6

Suspicious e-mail address. The email is coming from an external source! 1

Request for credentials and hidden misleading link 5

From: IT@printecgroop.gr To: you@printecgroup.com Subject: Urgent – Internet downtime Date: 31/08/20 Dear all, There will be proposed internet downtime next week due to a network upgrade. The downtime is expecting to happen overnight; however, there is a good chance that this will carry over to the following morning. Login now  for more information on dates and arrangements made around this issue.  Regards,  Printec  IT  Departament **External Message** - Please be cautious before opening links or attachments

Scene 7

The email address does not look genuine. Did you notice  the “m” was spelled “ rn ”?  Legit companies have domain emails. 1

The email looks like it’s from  Microsoft , a company you know and trust. It even uses Microsoft’s logo. 2

Legit companies usually call you by your  name . 4

Usually, when your password has expired you can not keep your old one. 6

Legit companies don’t promote  password expiration policies. 5

Microsoft Password Expiration Reminder Hello printec.user Your password expired on  07/13/2021 . Please change your password. Email :  printec.user@printecgroup.com If you wish to keep using the same password, click  Keep my password **External Message** - Please be cautious before opening links or attachments Keep my password From:  alert@rnicrosoft.com To:  printec.user @printecuser . com Subject:  Password Expiration Reminder Date: 19/07/21

Scene 8

Are you available? I need you to complete a task ASAP.   PS: I can not take calls, reply my email.   Sent from my iPad  Mon 17/09/2018 12:35 Ilias   Papastathopoulos  <i.papastathopoulos@PrintecGroup.com> Got some time IL To       Panagoulis  Athanasios ✓

The email seems to be from  Ilias   Papastathopoulos  but the address is not valid. 1

The request to reply by email is suspicious since at  Printec  for fast communication we use Microsoft Teams. 2

Scene 9

Do not reply  to emails, text or pop-up messages that ask for  personal or financial information , especially when they have a sense of  urgency . Don't open  unexpected email  attachments  and  do not trust links  in email. Stay cautious if you  do not recognize  the email  sender . Beware of senders who appear to be trustworthy. Check for  spelling errors  and visual inconsistencies. Forward  suspicious emails as  attachments  to  group_it_helpdesk@printecgroup.com

Scene 10

Follow the link to test yourself if you can spot phishing emails. https://phishingquiz.withgoogle.com/

Scene 11