What is Phishing?

Phishing schemes are designed to lure you in and get you to take the bait. They typically try to trick you into thinking they're someone you trust, like your bank or a familiar company.  Here's how it works:

• The lure: You get an email, text message, or phone call that appears to be from a legitimate source. The message might create a sense of urgency, like warning you about a problem with your account or offering a discount.

• The bait: The message will then try to get you to click on a link or open an attachment. These links might lead to fake websites designed to look like the real thing.

• The hook: Once you enter your personal information on the fake website or open the attachment (which might contain malware), the phisher has what they're looking for. This information could be anything from your login credentials to your credit card number.

Phishing attacks are a major threat because they prey on people's trust. By being aware of how they work, you can avoid becoming a victim.

How do I spot a Phishing Email?

Here are some tips for spotting phishing emails:

• Check the sender's address: Look closely at the email address of the sender. Phishing emails often have sender addresses that don't match the real company they're pretending to be.

• Beware of urgency: Phishing emails often try to create a sense of urgency to pressure you into clicking a link without thinking.

• Misspelled words and bad grammar: Legitimate companies typically proofread their emails carefully. Typos and grammatical errors can be a sign of a phishing attempt.

• Suspicious attachments: Don't open attachments from unknown senders.

• Verify before you act: If you're unsure whether an email is legitimate, don't click on any links. Instead, log in to your account directly by typing the web address into your browser, not clicking a link in the email.

By following these steps, you can help protect yourself and our district from phishing attacks.

What do I do if I receive a suspicious email?

1. Report the Email:  Office 365 has a built-in reporting function to help flag phishing attempts
   

   •  In Outlook on the web or desktop app, select the suspicious email.

   •  Find the "Report" button in the ribbon (usually near the top). Click it and choose "Report Phishing".

   • This will move the email to your junk folder and also report it to Microsoft to help improve their spam filters.

2. Forward the Email: Forward it to our Technology Team email. [email protected]

3. Delete the Email: Once you've reported it, you can safely delete the email.

GTPS Gone Phishing

In an effort to raise awareness of ongoing phishing attacks in the district and promote good cyber hygiene, the Coordinator of Technology has started the Gone Phishing campaign. We encourage all staff to forward any suspicious emails to the technology team so that we can keep staff informed of all suspicious email activity. Simply forward any suspicious email to [email protected] Every phishing email shared will earn that staff member entry into a drawing at the end of the year to receive a prize.