Phishing attacks are fraudulent
forms of communication that can
compromise all kinds of
data sources, even
though they seem
to be coming from a
reliable source.
Here are some of
the top phishing
email subject lines
that every staff
should be aware of:
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
Need to check the
password immediately
01
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
This title tag is menacing because it
emphasizes a problem affecting
workplaces everywhere: expired
passwords. Keep an eye out for
the following variations on
this email subject line:
Passwords must be changed immediately
1
Office 365: change your password immediately
2
Slack: password reset for the account
3
login
username
password
remember me
Billing information
is out of date
02
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
Another strategy attackers use is an email
that alleges an account’s billing information
needs to be updated. See the email
Dear customer,
It has come to our attention
that your account billing information
records are out of date. That needs to
be updated. Failure to update your records
will result in account termination. Please
click the link below to update your
billing information.
Confidential information
about covid-19
03
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
Please check the new
vaccination information.
A list of highly secure
test locations. People enjoy
keeping secrets because
they make them feel
special and significant.
We feel even more
pressure to click on emails that
promise to inform us of life-changing
information, like COVID-19.
Dropbox: Document
shared with you
04
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
Dropbox is frequently used in offices to
share media files like
documents and
images, and the
file attachments
that come with
these files are
frequently vectors
for malware.
Attention: unusual
account activity detected
05
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
Danger! Alert! Take action now!
That is what this subject line
screams, and it will
coerce the workers to open
the email in search of more
information
Earn money working
from home
06
www.infosectrain.com
@infosectrain #
l
e
a
r
n
t
o
r
i
s
e
After covid-19, working from home is
common, and attackers take advantage
of this by presenting bogus work-from
home and freelance opportunities.