Phishing Awareness Campaign Results for January 2018

The Office of Information Technology's (OIT) Phishing Awareness Campaign is helping College employees learn about phishing emails and threats. Our January scenario marks the start of a new year and establishes the benchmark for 2018. The January phishing scenario sent to employees was from "Barry Johnson" and contained a PDF file named "Invoice-FEB297E". Approximately 5,000 employees received this scenario. Out of that number, 735 employees reported the suspicious email to the PhishTrap mailbox. Unfortunately, 367 employees clicked on the link with 26 employees submitting their login credentials in the link's web form. Please remember to never submit your MyMC user name and password in an unfamiliar web page. The phishing clues were: *Unknown sender/email address *Unexpected invoice/document *Unknown link *Unfamiliar process Employees that enter their MyMC login credentials to an unknown source provide potential attackers access to your: *W2, social security number *Email *Benefits, retirement plans *Pay information, home address, etc. OIT encourages all employees who need assistance in spotting a phishing email to take the Cybersecurity e-courses within MC Learns. The e-courses are short videos that provide employees with the skills needed to detect malicious emails. Additionally, all employees are invited to register for Two-Factor Authentication (2FA) to increase their privacy and security. To learn more about 2FA, please visit https://mcblogs.montgomerycollege.edu/itprojects/2fa/faqs/. If you are unsure about an email and its content, then please report it to the PhishTrap mailbox using the Report Phishing tool located on the Microsoft Outlook toolbar. While using the O365 portal, forward and report to the phishtrap@montgomerycollege.edu mailbox. As always, for any technology-related questions or issues, please contact the IT Service Desk: *by clicking on the IT Service Desk icon on your desktop *by email at itservicedesk@montgomerycollege.edu *by web chat on OIT's web page at http://cms.montgomerycollege.edu/oit *by phone at 240-567-7222