Be aware of phishing (scam) emails

Yesterday some of our Fire and Emergency personnel received a phishing email, and we’d like to remind you all to be vigilant. The email received was from the genuine email address of a supplier whose email system had been compromised. This makes it even more important to be alert to the signs of phishing since it appeared to come from a trusted person.  

Phishing emails have links or attachments that pose a risk to our systems. It is important that we are all aware that this risk is real and know what to do if we are targeted.

What to look out for:

• Check that the email address is spelled correctly or is correct. Some phishing emails will use the display name of current or past Fire and Emergency personnel as the sender but the email address is a little different to the genuine one.
• Be cautious of emails asking you to click on a link to login, or update, or verify your details.
• Be cautious of emails saying you’ve won something, emails asking you to take urgent action and emails threatening you with legal action.
• Be cautious of emails that look like they are from a Fire and Emergency employee, asking you to arrange a payment.
• Check for spelling mistakes or for unusual tones.
• Be particularly cautious if the email was quarantined and you or another recipient of it, asked for it to be released.

What you need to do:

Important

• Do not reply to a phishing or scam email.
• Do not click on any links or open any attachments.
• Validate with the sender using a known contact number, not the details in the email.
• Call the ICT Helpdesk on 0800 374 843 immediately if you suspect your account has been compromised or our ICT systems are at risk.

If you are in doubt about any email you receive – please report it. You can find out more about how to do this here.(external link)

Other things you can do:

If you have not already done so, please make sure you complete the online learning module for Information Security on Learning Station.

Make sure you have read the Information and Communications Technology (ICT) Acceptable Use Policy(external link) so you know the rules around the use of our equipment and sharing of information.

Where to go for more information:

Familiarise yourself with the Portal page(external link) which provides more guidance on what to look for and what to do if you do respond to or click on a link or attachment in a phishing email.

Take a look at the guidance from the National Cyber Security Centre(external link) for further information.

Contact:

If you have any questions or anything to report, get in touch with the ICT Team at ict.support@fireandemergency.nz or phone 0800 374 843 and select option 1.