Module 2 · 11:32 video + 10-question quiz · free video
Phishing: Spotting the Hook
A real-looking phishing email taken apart line by line: the sender, the lure, the action and the pressure. How to see where a link really goes on a computer and a phone, why "enable content" is the hook, how a password-harvesting page differs from the real sign-in, and the lures that work in 2026.
The scenario
Thursday, 16:40 — a "shared document" email lands just before home time.
The habit this module drills
The five-second scan, then go around the message.
After this module you can
- ✓Name the four parts of any phishing message — sender, lure, action, pressure.
- ✓Check who a message is really from and where a link really goes, on a computer and on a phone.
- ✓Tell a password-harvesting page from the real sign-in.
- ✓Use the report button properly — before you click, and especially after.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 2 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…