Phish Quiz 2018

The 2018 Phish Quiz contest is closed! Winners were notified by email on November 29, 2018. The correct answers to this year's quiz are highlighted in bold and italics below.

Phishing can be used by hackers to:

  • Steal your personal and private information, such as passwords, social security numbers, and credit card numbers
  • Steal your identity
  • Log in to your social media accounts and gather potentially embarrassing information, then use it to blackmail you
  • All of the above

Which one of the following items is *least* likely to indicate a phishing email?

  • A fake URL, such as http:// duckWeb.uoregon.edud.in
  • Impersonated “From” address, such as "UO Information Services jazzyb @gmail.com>"
  • Reminder from "UO Information Services authmail@uoregon.edu>" that your Duck ID password will expire soon and you need to create a new one at Duck ID Self-Service
  • Unexpected tone or content, such as a joke from your professor

To avoid becoming a victim of phishing, what should you always do?

  • Click on every link you receive in an email from anyone; you do not have anything that phishers want
  • Before you click a link, hover over it to check for discrepancies between the display text and the URL
  • Email a message to your friends even if you are somewhat suspicious of the message
  • Open all attachments sent to you, even from unexpected sources; you’ve just got to know what’s inside!

If you receive a message that you think could be a phishing message, what should you do?

  • Click on the link included so you can investigate
  • Reply to the email to curse at the potential hacker
  • Save it in a special folder in your inbox for later review
  • Forward the message to phishing@uoregon.edu so someone from the UO Information Security Office can investigate

You clicked on a link in a phishing email, entered your Duck ID and password, and then realized it was a scam. What’s the first thing you should do?

  • Delete the email so no one can find out; how embarrassing!
  • Contact the UO Information Security Office or the UO Technology Service Desk to report it and receive assistance to reduce potential harm to you or your family
  • Try to contact the hackers to request that they do not scam you out of your money or steal your private information, even though most hackers are criminals
  • Just delete the email and forget it; the hackers probably won't use your private information or try to harm you in any way

Questions? Contact the Technology Service Desk.