In the interest of making information security awareness more interesting - even humorous - the Information Security team has vetted this list of short, "byte-sized" security awareness videos from reputable agencies and organizations. Topics include spear phishing, social engineering, ransomware and more and were included for their applicability to ECU.
The National Counterintelligence and Security Center
This compelling and humorous video describes how adversaries try to manipulate our natural tendency to trust others. Using information they've already acquired, bad actors try to convince us to take action we wouldn't normally take. This video covers good advice such as being wary of any unsolicited contact and trusting our instincts not to be pressured into giving away information.
The National Counterintelligence and Security Center
Spear phishing is a more targeted form of phishing attack using information about you acquired from the internet or social engineering, and is designed to trick you into trusting an email and its content. Typically, the spear phishing attack directs you to open a fraudulent link or malicious attachment. This video summarizes good advice such as deleting suspicious emails, never opening attachments or hyperlinks from unknown senders and contacting companies or officials directly to verify the authenticity of information you’ve received.
The National Counterintelligence and Security Center
This video describes how bad actors use social media deception to pose as job recruiters to steal and exploit sensitive information to which employees have access.