🚨 BEWARE OF PHISHING EMAILS! Don’t Let One Click Give Attackers Access

Phishing is a fraudulent attempt that impersonates a trusted person or organization to steal passwords, OTPs, credentials, personal information, or other sensitive company data.

Phishing emails can look highly convincing, using familiar names, logos, and even “IHC” or “Pertamina” identities. That’s why you should never rely solely on the sender’s display name. Always verify the email before taking any action.

🔎 Before clicking or responding, follow the 4C:

• Check Sender — Verify the sender’s email address and domain.
• Check URL — Hover over links and make sure the destination is legitimate.
• Check Content — Be cautious of requests for passwords, OTPs, sensitive data, or financial information.
• Check Urgency — Don’t be pressured by emails demanding immediate action or threatening consequences.

🔒 Protect your account & company data:

• Never share your password, OTP, PIN, or credentials with anyone.
• Enable MFA (Multi-Factor Authentication) whenever available.
• Avoid opening suspicious attachments or links.
• When in doubt, verify through an official channel before taking action.
• Report suspicious emails through ditra.ihc.id or use “Report Phishing” in Microsoft Outlook.

⚠️ IMPORTANT:

An email displaying the name “IHC” or “Pertamina” does NOT automatically mean it is legitimate. Sender identities can be spoofed or misused.

💡 STOP. CHECK. REPORT.

Think before you click. Taking a few seconds to verify an email can help prevent data breaches and protect our accounts and company information.

🛡️ Be Cyber Aware. Protect Our Data.