HIGH PRIORITY
🎫 Ticket #4474
Client⚖️ Pemberton & Quill, Attorneys at Law
Submitted byMs. Quill (Partner)
Assigned toMabel
TypeRemote — Security
Module16 — Security Strategies
ObjectiveCore 2 · 2.4 — Social engineering, threats & vulnerabilities
Subject: Suspicious email asking us to "confirm" our document-portal login
One of our paralegals received an urgent email this morning that appears to be from our
document-management provider. It says our account "will be suspended in 24 hours" unless we
click a link and re-enter our portal username and password to verify the account. The logo
looks right, but the sender address is a string of random characters and the link, when hovered,
points to a domain I don't recognize. Nobody has clicked it yet. Given the sensitive client files
we hold, I want to know exactly how to handle this. — A. Quill
— Ms. Quill
Mabel's note: "Lovely instincts on the firm's part — they hovered the link and didn't click. We reported the message, confirmed with the real provider that the account was perfectly fine, and turned on multi-factor authentication for the whole office. And Ms. Quill, dear… we really must talk about those sticky notes. I'll bring tea. — Mabel"