Waspada Email Phishing

One Click Can Lead to a Data Breach
 

As the use of email in daily work activities continues to increase, phishing attacks have also become more frequent. Phishing is a type of fraudulent email designed to appear as if it comes from a trusted source, such as supervisors, HR/Internal teams, IT Support, or financial institutions.

The purpose of these emails is to trick recipients into revealing sensitive information, such as account credentials, passwords, or other confidential data by encouraging them to click on malicious links or open harmful attachments.

Therefore, all employees are advised to remain vigilant and carefully review any email received before taking further action.
 

🔎 Signs of a Phishing Email

Please be aware of the following indicators when receiving emails:

• Suspicious or unfamiliar sender address

• Messages that create urgency or pressure you to act immediately

• Requests to click on links or open attachments

• Links that do not lead to the company’s official website or domain

• Requests for sensitive information such as passwords, OTPs, or personal data
   

If you notice any of these signs, do not follow the instructions in the email immediately.
 

👀 Verify Before You Click
 

Before clicking any link in an email, always verify the URL first.

You can do this by hovering your cursor over the link text (for example, “Click Here”) to view the actual website address. Ensure that the link directs you to the official company domain and not to a suspicious or unfamiliar website.

This simple step can significantly reduce the risk of phishing attacks.
 

🚨 If You Have Already Clicked a Suspicious Link
 

If you believe you have interacted with a suspicious email or clicked a potentially malicious link, please take the following actions immediately:

• Change or reset your account password

• Report the incident to the SOC / Cyber Security Team

• Perform a full antivirus scan on your device
   

Prompt action is essential to prevent potential account misuse or data breaches.
 

🔐 Information Security Is Everyone’s Responsibility
 

Employee awareness plays a critical role in protecting the company’s systems and data. By carefully reviewing incoming emails and staying alert to potential threats, we can help safeguard company information, operational systems, and other critical assets from cyber attacks.

If you receive or identify a suspicious email, please report it immediately to the ICT Cyber Security Team via Ditra.ihc.id.