TRAINING SIMULATION

You're on the Training Page — No Data Collected

This exercise was a simulation to help you spot phishing and urgent-sounding security emails. No passwords or personal data were requested or recorded.

Red flags to notice in the email you received:

Urgent language: "Immediate action required" — creates panic.
Generic sender name or mismatch between sender name and domain.
Button/link asking you to sign in or reset a password (always hover to check the URL).
Short timelines or threats of suspension.

Data Collection Demonstration (Educational Only)

This section demonstrates how malicious sites might attempt to collect your data. In a real attack, this information could be stolen without your knowledge.

Warning: This is for educational purposes only. No data is actually being collected or stored.

Quick Quiz — Which of these were suspicious in the email?

Urgent tone / threat of suspension
Sender uses the exact official domain (no mismatch)
Button links to a different domain than expected
The email asked me to enter my password directly

If you clicked the link in the email: good — that's the point of the exercise. If you would have entered a password on a real page, please follow these steps immediately: change passwords on affected accounts, enable 2-factor authentication, and report the incident to your instructor or IT.

Questions? Contact: cict@sorsu.edu.ph