SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What is a strong indicator of a phishing attack?

1. An email claiming to be urgent

2. Emails from official sources

3. A friendly message from a coworker

4. An error message in email

The correct answer is: An email claiming to be urgent

An email claiming to be urgent is indeed a strong indicator of a phishing attack because cybercriminals often use a sense of urgency to manipulate and pressure individuals into acting quickly without thinking. Such emails typically instruct recipients to click on links, provide sensitive information, or download attachments, all of which can lead to security breaches. This tactic exploits human psychology, leveraging fear or the need to act swiftly in response to a perceived threat or opportunity. In contrast, emails from official sources typically follow established formats and provide clear information that aligns with organizational communications, making them less likely to be phishing attempts. A friendly message from a coworker, while potentially innocent, can be spoofed; however, context matters, and such messages usually do not carry the same red flags as urgent requests. An error message in an email might indicate technical problems rather than an attempt to deceive, thus lacking the definitive traits associated with phishing methodologies.