This was a security simulation
The message you clicked was a simulated deceptive email, part of a security-awareness program authorized by your organization. No real data was compromised and no credentials were collected.
Authorized simulation, agreed with your organization.
Before you continue
What should you do now?
In a real case, would you know what to do? We will see the right steps shortly.
Do not click
any other link
Report to IT
right away
Procedure
internal incident
The right move: do not click any more links and report the message straight away, following your internal incident-handling procedure.
No worries: this is a chance to learn
Anyone can fall for a well-crafted deceptive message. The point of this simulation is not to judge, but to help you spot the same techniques when they appear in a real attack.
Your inbox under attack
Recognize fake emails
A look at your inbox: some emails are genuine, others imitate well-known senders with near-identical domains.
For each email below, decide whether the sender is legitimate or a deceptive message. Look especially at the domain after the @.
Under the lens