A phishing test was conducted using an email campaign impersonating the Microsoft Support Team from microsoft.mclarens.co.in. The email claimed the recipient’s Outlook storage was full, urging them to click “Manage Your Mailbox” to free up space. This button led to a fake Microsoft login page designed to capture credentials. After submission, users were redirected to an error page, completing the test.
The phishing assessment concluded that while some employees were susceptible to deceptive phishing attempts, a significant number exercised caution by refraining from engagement—a positive sign. However, there is room for improvement. Starting with this newsletter, we are taking a step towards strengthening phishing awareness. Education is key learning to identify phishing emails and avoiding malicious links is essential in defending against cyber threats. Strengthening training programs and reinforcing reporting procedures will further enhance our organization’s security posture.
Phishing is a common cyber attack where attackers pose as trusted sources—via email, text, or calls—to trick people into sharing sensitive data like passwords or bank info. It’s a form of social engineering that uses deception and urgency. From fake links to malware, tactics have evolved. Since the 1990s, phishing has grown into types like spear phishing, smishing, vishing, and whaling—each with its own sneaky approach.
The attacker tricks people by faking the sender’s email to look like it’s from a trusted source. The email reaches the inbox and seems real. It usually has a link that takes the user to a fake website that looks genuine. The user is then asked to enter login details or financial info, which goes directly to the attacker and is used for fraud or identity theft.
Phishing attacks are getting sneakier, but there are still some clear warning signs you can watch for. Here are some telltale signs that an email might be a phishing attempt:
Always double-check the sender’s email,
especially the domain. Attackers often use
slight variations of legitimate addresses to
trick users (e.g., [email protected]
instead of [email protected]).
Never share passwords, credit card numbers, or other sensitive data via email,
even if the sender seems trustworthy.
Never click blindly. Hover over links to check the actual URL before clicking. If something looks off, go directly to the
official website via browser.
Add an extra layer of protection to your social accounts. With 2FA, even if a password is compromised, attackers still need a second verification factor.
Phishing emails often create a false sense of urgency (e.g., “Your account will be blocked!”). Pause, assess, and verify before taking action.
Regularly update your operating system, browser, and antivirus tools to fix vulnerabilities that attackers often exploit in phishing campaigns.
Legitimate emails usually address you by name or title. Generic greetings like “Dear
user” or “Dear customer” can be red flags.
Ensure that your email service or organization uses advanced spam filters and secure gateways that block malicious
content before it reaches your inbox.
Verify the presence of authentic branding,
logos, and signatures. Also, look out for
poor grammar or spelling errors — a
common sign of phishing.
If an email seems suspicious, contact the
sender directly using known contact
information (not by replying to the email).
A quick call or message can clarify
legitimacy.
“The weakest link in cybersecurity isn’t the technology — it’s the human.”
Phishing is constantly evolving, but so can we. This campaign was a wake-up call — a
reminder that even the most convincing emails can be traps. Together, we’ve taken the
first step in building a stronger security culture. Awareness is the best defense.
Phishing threats are only a click away. Stay vigilant, report suspicious messages, and help
keep our organization secure—because cybersecurity is everyone’s responsibility.
Build & scale AI models on low-cost cloud GPUs.
Table of Contents Share with your community! Home Blog PHISHING 101 10 mins read Table
Table of Contents Share with your community! Home Blog Combating Retail Fraud in 2025: McLaren's
Table of Contents Share with your community! Home Blog Author: Tamaghna Bose 10 mins read
Services
OFFICE
© 2025 McLaren Strategic Solutions. All rights reserved.
