Training Presentation on Phishing Attacks

1. Phishing Attacks
Awareness & Prevention

2. What is Phishing?
• Phishing is a type of cyberattack where attackers trick users into
revealing sensitive information (like passwords, credit card numbers,
or personal data) by pretending to be a trustworthy source—typically
via email, message, or website.

3. Types of Phishing Attacks
Type Description
Email Phishing Fake emails appearing to come from legitimate sources (banks, IT
support).
Spear Phishing Targeted phishing attack on specific individuals or organizations.
Whaling Aimed at high-level executives (CEO, CFO).
Smishing Phishing via SMS (text messages).
Vishing Phishing via voice calls.
Clone Phishing Duplicating legitimate emails and altering links/attachments.

9. How to Recognize a Phishing Attempt
• Misspelled domain names or suspicious URLs.
• Urgent or threatening language ("Your account will be locked!").
• Unexpected attachments or links.
• Sender's email address doesn't match official domains.
• Requests for sensitive information via email.

10. Prevention Tips
•✅ Always verify the sender’s email.
•✅ Hover over links to inspect URLs before clicking.
•✅ Do not download or open suspicious attachments.
•✅ Use multi-factor authentication (MFA).
•✅ Keep systems and browsers updated.
•✅ Educate and train employees regularly.
•✅ Use email filters and anti-phishing tools.