Phishing Awareness Training

Summary

Learn about the Introduction to Phishing online training module available to everyone at the UO.

Body

Introduction

This training is part of the UO's security awareness training program, the ongoing effort to educate the UO community about policies, procedures, and best practices relating to information security.

The University of Oregon utilizes two methods of phishing awareness training.

  1. An Introduction to Phishing, an online training module about email phishing that is available to everyone at the University of Oregon and;
  2. Simulated Educational Phishing Campaingns, designed to give the University of Oregon community experience in identifying and reporting simulated phishing messages.

About the Training

 

An Introduction to Phishing 

The Introduction to Phishing training will help you identify potentially dangerous emails and teach you how to deal with them effectively. This brief, interactive module is recommended for all UO students, staff, and faculty.

Access the training through the link below. It will take you to UO's Proofpoint Security Awareness Training (PSAT) platform. Log in with your Duck ID when prompted. Then the training will start.

Introduction to Phishing (15 minutes; PSAT platform)

 

Simulated Phishing Educational Campaigns

Spotting phishing emails is a skill that gets better with practice! Our phishing awareness and reporting exercises are crafted to give the Oregon community hands-on experience in identifying and reporting simulated phishing attempts. This way, when a real phishing email lands in your inbox, you’ll be ready to tackle it with confidence.

 

Why Simulated Phishing?

Phishing is the greatest threat to our digital privacy and security today.

Despite our security tools blocking millions of phishing messages each month, some will inevitably slip through into your inbox. You are our first and best line of defense against these threats. Recognizing phishing attempts is crucial to protecting yourself, and reporting them helps shield our entire community. Stay vigilant and proactive—phishing awareness and reporting practice will keep us ready to respond swiftly and effectively to these ever-present dangers.

 

What to expect

University community members should expect to receive a  simulated phish at least once every three months.  As with any suspicious message, it should be reported using the Report Phish Button or by forwarding it to phishing@uoregon.edu.

If you miss the simulated phish and accidently click on the link, you will be redirected to a page that  reassures you it’s just a drill and highlights the warning signs to watch out for next time. After you have read the information presented, close that page and report the email. Remember, it’s all part of staying sharp and ready. Every practice counts.

These exercises will

  • Deliver simulated phish based on actual phishing attempts found in the community
  • Give the University of Oregon community experience in identifying and reporting phishing emails
  • Deliver  data-driven insights into the phishing risks faced by our community

These exercises will not

  • Send overly deceitful emails using techniques more sophisticated than observed in the University of Oregon community.
  • Directly impersonate University of Oregon departments or services.
  • Report the identities of those who click.
  • Assign mandatory training or take punitive action against those who click.

Have Questions?

Contact the Information Security Office by submitting a ticket to the Security Awareness Training Support service. 

Additional Resources

Details

Details

Article ID: 140533
Created
Tue 1/17/23 6:10 PM
Modified
Wed 9/18/24 1:18 PM

Related Articles

Related Articles (6)

How to report phishing attempts to our Information Security Office.
This article provides basic instruction on how to access the Proofpoint Security Awareness Training (PSAT) platform.
Learn about the Tax-Related Phishing online training module available to everyone at the UO.
The UO community is often the target of unwanted email messaging campaigns requesting that the user visit a website and enter their credentials in order to address an urgent issue with their accounts, banking records, student information, and employee records. This knowledge base article will provide you with ten (10) basic tips that everyone can follow to help discern whether an email message is face.
Information about unsolicited and undesirable emails, text (SMS) messages, voice messages, telephone spam, and caller ID spoofing. Spoofing means that the caller has falsified their caller ID. Be wary of all unsolicited contact. Do not divulge sensitive or personal information when engaging with any unsolicited contact.
Learn how to use the "Report Phish" button in Outlook to report phishing emails to the UO Information Security Office.

Related Services / Offerings

Related Services / Offerings (1)

UO Staff, Faculty, and Students use this service for requesting help with the University of Oregon’s Security Awareness Program.