Don't Panic

You have fallen victim to a phishing campaign.

Fortunately, this was just a phishing training exercise. Your password has not been recorded as part of this training. If this were real, you just gave away your credentials to a potentially malicious person.

Please be sure to never divulge your credentials to any sites that you did not intentionally navigate to, and be cautious when opening emails and clicking links.

What did I miss?

• Always be on the lookout for errors in the email - typos, grammatical errors, dates that don't make sense, etc.
• Be wary of emails that originate from external sources - they are tagged with a yellow "External" bar next to the subject line.
• Hover your mouse over any links before clicking on them to ensure they are going to a safe destination, instead of downloading malicious attachments.
• Make sure you think about your actions before hastily clicking... does it make sense to receive a PayPal email on your school email account? 
• Why would PayPal be directing you to a gpschools.org page to sign in?

Suggested Materials:

Common Scams and Frauds

What is phishing?

How to Recognize Phishing Scams

Creating a Strong Password