The Phishing Reports

Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 34 of 43.

Challenge

Medium

Ticket from Sam, IT lead

A new mailbox rule is copying invoices outside Lumen. A new fake sender is also sending billing notices. Read the rule-creation log and the latest emails.

Stop the forwarding first, block new mail from the fake sender next, then quarantine and mark the existing fake as phishing before anyone uses its sign-in page. Keep ordinary sorting rules, my real message about keeping records, and mail from our real suppliers.

Try it yourself

Terminal

All lessons in Security Fundamentals

2Phishing

Phishing Look-Alike Domains Who Clicked The Second Wave

5Email Attacks

Reply-To Dangerous Attachments Where an Email Came From The Invoice Queue Business Email Compromise Blocking a Sender Mailbox RulesThe Phishing Reports

3Access Control

Groups Least Privilege Admin Rights The New Hire Leavers Shared Accounts Separation of Duties The Access Review

6Rules of the Job

Authorization No Hacking Back The Vendor's Call