King County has an easy way to report suspicious emails which may be phishing attacks. In Outlook you should see a button in the Home tab of the ribbon bar called “Report Phishing.” Here’s what the button looks like in the top ribbon (if you don’t see the button, try changing your view settings):

When do I use it?

Click the Report Phishing button anytime you believe the email you received is a phishing email or a potentially dangerous email. Using the Report Phishing button will send the email you report straight to our security team and Microsoft. The Report Phishing button should only be used to report emails you believe have malicious intent. If you receive spam or marketing emails, do not use the Report Phishing button. You can simply delete those emails.

How do I use it? 

When you click on the Report Phishing button, a prompt will ask you if you’re sure you want to report the email as a phishing email. If you select yes, the email will be sent to the KCIT security team, and the email will be deleted from your inbox. You’ll receive a pop-up message saying “Thank you for reporting this email to the security team. No more action is required.” If you accidently report a legitimate email as a phishing email, you can find the original item in the deleted items folder in your Outlook.

Why should I use it?

King County, like other governments, constantly fights off cyberattacks. Many attackers seek usernames and passwords so they can attack private bank accounts or business government networks to install ransomware, steal data or cause outages. Reporting suspicious emails keeps King County data and files more secure. The faster our security specialists know of phishing attacks, the quicker we can defend against them. You’re an important part of the process of keeping King County safe from cybercriminals.

Thank you for your cooperation. For questions, contact the KCIT Help Desk at 206-263-4357 or submit a Help Desk ticket.

One of the easiest ways the bad guys trick you into falling victim to their fraudulent scams is to exercise a sense of trust by pretending to be someone you know. More than likely, you receive emails from your Human Resources team on a frequent basis. Scammers take advantage of this constant communication by crafting spear phishing attacks using emails that spoof your HR team.

Spear phishing attacks are email scams that typically target an individual or organization by spoofing, or appearing to come from a trusted sender. Don’t blindly trust emails that seem to come from your HR department. See the tips below to learn more about these types of scams.

How do I spot a fake?

Does this sound like typical communication?

• Pay attention to the context in the body of the email. Look for spelling errors, grammar errors, and odd sentence structure.
• Are you being asked to review unfamiliar policies or procedures? If you’re being asked to download an attachment or click a link to review a policy you’ve never heard of, think twice before you click.
• Are you being asked to do something that wouldn’t typically be addressed via email? Beware of emails containing an attachment for your “paid bonus” or any other matter that seems out of the ordinary for email communication.

Who sent the email?

• Does the sender’s email address appear to be from an unfamiliar domain or a third-party company? If the domain of the sender’s email address is generic, for instance, “humanresources.com,” the email may not be from your internal HR department. Ensure the email is from an address that your HR team typically uses to send mail. But remember, even if the domain is from your organization, it could be spoofed.
• Does the email signature make sense? Ensure the signature in the body of the email matches the name and job role of the sender. Some HR phishing scam emails have unusual, or inaccurate job titles in the email signature–or have no signature at all.

When in doubt, always pick up the phone and call someone from your HR team to confirm the email is safe and legitimate. They’ll be thankful you used your resources, rather than putting King County at risk.