phishing Awareness Campaign

Super Secret Payment Co (SSP) is a UK based company providing payment systems to over 2000 companies including many organisations across the UK’s Critical National Infrastructure (CNI). CNI are the key infrastructure that enable the UK to function, such as the energy, water, and health sectors, as well as assets which may have an impact on human health and safety if they are not able to function correctly, such as the chemical and nuclear sectors.

SSP stores and has access to large databases of personal and sensitive client data, including bank details and Personal Identifying Information (PII), information that can be used to discover an individual's identity, such as their full name, email address, and phone number.

Last week, their immediate competitor, PaymentNow LTD, was hit by a data leak. It has been revealed that the origin of the leak was a phishing email sent to a non-technical company employee. Once access was gained the attackers used privilege escalation to gain access to the customer database containing PII (Full name, date of birth, address, and financial information) for all payments processed by the company in the last 5 years!!!!

As a result of this breach numerous, and the disclosure of financial information, fraudulent payments have been taken from over 100,000 individuals and PaymentNow LTD are facing legal action and fines.

SSP has hired you, a cyber security education and awareness expert, to create an awareness campaign. The aim of the campaign is to highlight the techniques used within phishing campaigns, as well as how to spot and avoid falling victim. The campaign will be displayed within their corporate offices and on the company intranet, as well as by the companies to which they supply their system.

• A4 or A3
• PDF
• All information must be true and honest.
• Please see disclaimers below.