This page is part of TMC2's security awareness program. It opens through a personal link in a TMC2 training message. If you reached it another way, there's nothing you need to do.
Questions? Reach out to your TMC2 contact.
Security Awareness Training
That was a TMC2 phishing simulation.
Good news: no harm done, and nothing you typed was stored. This was a safe, simulated test run by TMC2 to help you spot real attacks. Take two minutes to see what gave it away, then answer five quick questions.
What this email got wrong
1
The sender wasn't who it claimed. The address looked close to a real one but wasn't your company's actual domain. Always check the full address, not just the display name.
2
It pushed you to act fast. "Your password expires today" is pressure designed to make you click before you think. TMC2 rarely rushes you like this.
3
The link didn't go where it said. Hovering over the button would have shown an address that wasn't your real sign-in page.
Quick check: 5 questions
0 of 5 answered
1. An email says your password expires in 1 hour. What's the safest move?
Right call: never use the email's own link. Go there yourself or contact TMC2 directly. Replying just talks to the attacker.
2. Which sender address is most likely fake?
Attackers add extra words to a real-looking name. The real domain is exactly your company's, with nothing tacked on.
3. How can you check where a link really goes before clicking?
Hovering shows the true destination. Button text and logos are easy to fake.
4. A coworker emails asking you to buy gift cards for a client, today. What do you do?
Gift card requests are a classic scam. Check through a separate channel you already trust, never by replying to the same email.
5. You think you clicked a bad link. What's the best next step?
Reporting fast is the single best thing you can do. TMC2 can lock things down before any damage, and you will never be in trouble for speaking up.
