Email spoofing is a tactic used by cybercriminals to make an email appear as though it's coming from a trusted source—often someone within your own organisation.
The goal? To trick employees into sharing sensitive information, clicking malicious links, or even authorising financial transactions.
So, here’s how you can reduce the risk if you're unsure:
🔍 Inspect Email Headers:
Legitimate senders will have proper authentication (like SPF, DKIM, and DMARC). If the sender address looks odd or doesn’t match the domain, treat it with caution.
📎 Be Cautious with Attachments and Links:
Never open unexpected attachments or click on links from unfamiliar sources. Even if it looks like it’s from a colleague, double-check.
🚩 Look for Red Flags:
Poor grammar, urgent language, or offers that seem too good to be true are common signs of phishing attempts.
🔑 Update Compromised Credentials Immediately:
If you suspect an account has been compromised, change your passwords right away and run a full virus and malware scan.
