{"id":23388,"date":"2026-10-20T08:00:00","date_gmt":"2026-10-20T13:00:00","guid":{"rendered":"https:\/\/wp.stolaf.edu\/lits\/?p=23388"},"modified":"2026-10-12T15:35:50","modified_gmt":"2026-10-12T20:35:50","slug":"cybersecurity-awareness-month-week-4-how-to-spot-phishing","status":"publish","type":"post","link":"https:\/\/wp.stolaf.edu\/lits\/cybersecurity-awareness-month-week-4-how-to-spot-phishing\/","title":{"rendered":"Cybersecurity Awareness Month Week 4: How to spot phishing"},"content":{"rendered":"<div data-modular-content-collection>\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<p class=\"has-text-align-left wp-block-paragraph\">Phishing remains one of the most common and effective types of cyberattacks. Cybercriminals use carefully crafted emails to impersonate trusted organizations or individuals, hoping to trick you into revealing sensitive information, clicking on a malicious link, or opening a dangerous attachment. While phishing emails may look convincing, there are always warning signs if you know what to look for.<\/p>\n\n\n<figure class=\"wp-block-post-featured-image\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"1879\" height=\"1700\" src=\"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/10\/clown-around-1.png?resize=1879%2C1700&#038;ssl=1\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" style=\"object-fit:cover;\" \/><\/figure><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<h2 class=\"wp-block-heading\"><strong>Lookin\u2019 Phishy<\/strong><\/h2>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-4fc3f8e1 wp-block-group-is-layout-flex\">\n<ul class=\"wp-block-list\">\n<li><strong>Unexpected Requests:<\/strong> Be cautious of emails that ask you to download and install an invite, share personal data, or click on links you didn\u2019t ask for or are not relevant to you.<\/li>\n\n\n\n<li><strong>Urgency or Threats:<\/strong> \u201cAct now\u201d, \u201cyour account will be closed\u201d, or \u201cif you didn\u2019t authorize this payment, call us asap\u201d are common tactics used to trick you into taking a hasty action.<\/li>\n\n\n\n<li><strong>Suspicious Links:<\/strong> Hover your mouse over any hyperlink. If the web address looks odd or doesn\u2019t match the sender, don\u2019t click.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"950\" height=\"826\" src=\"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/10\/image-1.jpg?resize=950%2C826&#038;ssl=1\" alt=\"\" class=\"wp-image-23393\" style=\"aspect-ratio:1.1501247104226082;width:473px;height:auto\"\/><\/figure>\n<\/div>\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8f761849 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-4fc3f8e1 wp-block-group-is-layout-flex\">\n<ul class=\"wp-block-list\">\n<li><strong>Mismatched Email Address:<\/strong> Even if the display name looks familiar, double-check the actual sender\u2019s email. Look for small spelling changes or free email services where a known organization\u2019s domain should be. For example, if someone says they\u2019re emailing on behalf of the campus but are sending from a regular gmail address? That\u2019s a red flag.<\/li>\n\n\n\n<li><strong>Too Good to Be True Offers:<\/strong> If an email offers a bunch of free stuff, but you just have to give them your payment information for shipping and handling\u2013 that is an indicator you\u2019re going to be scammed out of whatever you pay and never receive the proposed item.&nbsp;<\/li>\n\n\n\n<li><strong>Unexpected Attachments:<\/strong> Attachments from unknown or unusual sources should be treated with extreme caution.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Polished Language Can Be Deceptive!<\/strong> It was once good advice that spelling, grammar, or formatting errors served as a warning sign of phishing. While that is still sometimes true, modern tools like AI chatbots make it easier for scammers to craft messages that are virtually error-free and written in a format. Don\u2019t rely solely on language quality to determine whether an email is legitimate. Look for red flags in the context and tone to tip you off.\u00a0<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>\u201cI\u2019m Doing My Part!\u201d<\/strong><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignleft size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"367\" height=\"512\" src=\"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/10\/image.jpg?resize=367%2C512&#038;ssl=1\" alt=\"\" class=\"wp-image-23392\" style=\"aspect-ratio:0.7168141350935494;width:244px;height:auto\"\/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">It can be tempting to just delete a suspicious message and move on, but reporting it does much more. All emails reported using the \u201cReport phishing\u201d option in Gmail (three dots in the upper right corner of the message) will create a ticket directly with IT and contribute to Google\u2019s spam and phishing detection.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re unsure whether an email message is legitimate, verify with the supposed sender using a separate trusted method like calling their number or talking to them in person\u2014not by replying to the suspicious email. Taking even a few moments to pause and confirm can prevent significant harm to you or the college.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phishing works because it preys on trust and emotional reactions. By staying alert, recognizing the signs, and reporting suspicious messages, you help defend not only yourself but the entire campus.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For more details on how to report phishing, check out 1 Minute on How to Report Phishing. (https:\/\/stolaf.hosted.panopto.com\/Panopto\/Pages\/Viewer.aspx?id=532464aa-0223-4e12-a9c6-ac590103f243)<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\">Go deeper on this topic by checking out the resources found here. <a href=\"https:\/\/www.staysafeonline.org\/articles\/phishing\">https:\/\/www.staysafeonline.org\/articles\/phishing<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Remember\u2026<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>About phishing simulations. <\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We\u2019ll conduct two phishing simulations for students in October and November. Phishing simulations for employees will continue at the monthly cadence we started in the spring. As always, if you see unusual or suspicious emails, report them as you would any other spam or phishing messages. Your vigilance keeps our community safer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Get your cybersecurity training done.<\/strong> <\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We aim for all faculty, staff, and first-year students to complete Cybersecurity 101 by the end of the month. It doesn\u2019t take long! Employees who complete the training by the end of October will be entered into a drawing for a $20 Bon App\u00e9tit gift card. Separate courses for <a href=\"https:\/\/mdl.stolaf.edu\/course\/view.php?id=67132\">students<\/a>\u00a0and\u00a0<a href=\"https:\/\/mdl.stolaf.edu\/course\/view.php?id=66698\">employees <\/a> can be found in Moodle.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Our online Cybersecurity Town Hall is on October 26.&nbsp;<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"520\" class=\"wp-image-23335\" style=\"width: 800px;\" src=\"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/09\/october-graphic-vfinal-no-border.gif?resize=800%2C520&#038;ssl=1\" alt=\"\"\/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Join Kendall George, information security officer for Carleton and St. Olaf Colleges, at our annual <strong><em>Cybersecurity Town Hall: Cybermaxxing to Securitymog the Ops. <\/em><\/strong>This engaging, interactive session will describe the current state of cyberthreats in higher education and the steps you can take to keep both campus and your own digital life secure. There will be ample time for questions and answers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udcc5 <a href=\"https:\/\/www.carleton.edu\/its\/calendar\/?eventId=uuh91261616i4j2t5k6g0f7bm8\">Monday, October 26 at noon<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Stay safe out there.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phi Anderson<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security Analyst<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Carleton and St. Olaf Colleges<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Phishing remains one of the most common and effective types of cyberattacks. Cybercriminals use carefully crafted emails to impersonate trusted organizations or individuals, hoping to trick you into revealing sensitive [&hellip;]<\/p>\n","protected":false},"author":12629,"featured_media":23440,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_spp_custom_css":"","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false,"_members_access_role":[],"_members_access_error":""},"categories":[31,29],"tags":[],"class_list":["post-23388","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-it"],"acf":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/10\/clown-around-1.png?fit=1879%2C1700&ssl=1","_links":{"self":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23388","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/users\/12629"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/comments?post=23388"}],"version-history":[{"count":26,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23388\/revisions"}],"predecessor-version":[{"id":23469,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23388\/revisions\/23469"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/media\/23440"}],"wp:attachment":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/media?parent=23388"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/categories?post=23388"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/tags?post=23388"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}