Question

1. spot the phishing email:

here is an email:
from: alert@bank-secure.com
subject: urgent: suspicious activity detected
dear customer,
we’ve detected suspicious activity in your account. please verify your account immediately using the link below:
verify account now
which elements indicate this email is malicious?
□ the sender address does not match the official bank domain.
□ the use of urgent language to prompt immediate action.
□ the email has perfect spelling and grammar.
□ the email uses a generic greeting.

Explanation:

1. Sender address: Legitimate banks use their official domain. A domain like "bank - secure.com" is often a fake one, not matching real bank domains.
2. Urgent language: Phishing emails use urgent terms (like "Urgent: Suspicious Activity Detected", "immediately") to pressure users into hasty action, bypassing caution.
3. Generic greeting: Instead of using the customer's name, "Dear Customer" is generic, a common phishing trait as attackers don't have personal details.
4. Perfect spelling/grammar: This is not a phishing indicator. Phishing emails can have good spelling/grammar, so this option is incorrect.

Answer:

• The sender address does not match the official bank domain.
• The use of urgent language to prompt immediate action.
• The email uses a generic greeting.