8 messages just landed. Open each one, check who really sent it and where its links go (hover or tap them), then report it or mark it safe.
Practice for defenders. This lab trains the skills SOC analysts, incident responders and sysadmins use to protect systems. Everything runs in your browser. The companies, people, data and IP addresses are made up, and nothing here touches a real system. Only use security skills on systems you own or have written permission to test.
Your account will be suspended in 24 hours
Dear customer, We detected unusual sign-in activity on your account. To avoid permanent suspension, verify your identity within 24 hours.
Verify my accountGoes to: http://northwind-bank.verify-login.co/securePlanned maintenance this Saturday 22:00–23:00
Hi Priya, Email and VPN will be unavailable on Saturday between 22:00 and 23:00 while we install updates. No action is needed from you. Questions? Reply here or call extension 4410.
ParcelGo delivery
ParcelGo: your parcel is held at our depot due to an unpaid customs fee of £1.99. Pay within 12 hours or it will be returned.
parcelgo-delivery.help/payGoes to: https://parcelgo-delivery.help/payQuick favour
Are you at your desk? I need you to buy five £100 gift cards for a client right away. I'm in meetings all day so just email me the codes. Please keep this between us for now.
Reset your Fabrikam password
You asked to reset the password for your Fabrikam account a minute ago. This link expires in 30 minutes. If you didn't ask for this, you can ignore this email and your password won't change.
Reset passwordGoes to: https://account.fabrikam.com/reset?token=8f2c91Invoice_0932.pdf has been shared with you
A document has been shared with you. Sign in with your work email and password to view it. Attachment: Invoice_0932.pdf.html
Open documentGoes to: https://clouddrive-share.net/login?next=Invoice_0932Your books are due back on 14 March
Hello Sam, The two books on your card are due back on 14 March. You can renew them by signing in at woodgrovelibrary.org or at any branch.
Mailbox 98% full: action required
Your mailbox has almost reached its limit. You will stop receiving new email today unless you increase your storage.
Increase storageGoes to: https://contoso-helpdesk.com/owa-loginPick a message to start.
Take your time. Phishing works by making you rush.
The habit that beats phishing: slow down, check where links really go, and confirm unusual requests through a channel you already trust.
Every company, person, address and link in this game is made up for practice.
