Simulation · [1.1.A.1, 1.1.A.2, 1.1.C.2, 1.1.C.3]
Clue hunt: is this text message a social engineering attack?
A text arrives on a student’s phone. Tap every line that is a red flag, then check your answers. There are 3.
7:42▂▄▆ 🔋
#+1 (555) 014-2207Text message · Today
-
Fine. A greeting on its own proves nothing either way. Anyone can claim to be support.
-
Fine. Real services do send alerts like this, which is exactly why adversaries copy them. Judge the request, not the opener.
-
Red flag. Urgency and intimidation together: a short deadline plus a threat of losing the account, so you act before thinking.
-
Red flag. No real service asks you to send back a one-time password (OTP). Whoever has that code can log in as you.
-
Red flag. A look-alike link to a login page: the classic way to capture credentials.
-
Fine. Friendly closing lines are normal in real and fake messages alike.
Text message
Simulation · [1.1.A.1, 1.1.A.2, 1.1.C.2, 1.1.C.3]
Clue hunt: is this text message a social engineering attack?
A text arrives on a student’s phone. Tap every line that is a red flag, then check your answers. There are 3.
Fine. A greeting on its own proves nothing either way. Anyone can claim to be support.
Fine. Real services do send alerts like this, which is exactly why adversaries copy them. Judge the request, not the opener.
Red flag. Urgency and intimidation together: a short deadline plus a threat of losing the account, so you act before thinking.
Red flag. No real service asks you to send back a one-time password (OTP). Whoever has that code can log in as you.
Red flag. A look-alike link to a login page: the classic way to capture credentials.
Fine. Friendly closing lines are normal in real and fake messages alike.