Security Awareness
Good news: no harm was done, and nothing you entered was stored. This message was part of a training exercise to help our staff recognize phishing attempts before a real attacker catches them off guard.
If this had been a real attack, the information you just submitted could have given a criminal access to your district account, your email, and the files and systems connected to it.
How to spot the next one
- Check the real sender address. The display name is easy to fake. Click or hover to see the actual email address behind it.
- Hover before you click. Resting your cursor over a link shows where it really goes. If it isn't a site you recognize, don't click.
- Be wary of urgency. "Your password expires today" or "your account will be suspended" is designed to make you act before you think.
- Watch for login pages after a link. A legitimate service rarely emails you a link that lands straight on a sign-in screen asking for your password.
- When in doubt, go direct. Open a new tab and type the address yourself, or contact the Help Desk. Never use the link in a suspicious message.
Think you've seen a real one?
If a message ever looks suspicious, don't click anything and don't reply. Report it to the Technology Department right away. It is always better to ask than to assume.
