/
All Behaviours > SB167 Reports a suspected phishing message
SB167 Reports a suspected phishing message
Reporting suspected phishing messages notifies IT or security teams that employees are being targeted by cyber attackers. Employees who report suspected phishing messages reduce organisation's information security risk by ensuring that appropriately trained people can take steps to minimise the harm the potential cybercriminals can do.
Why is it important?
Reporting suspected phishing messages allows your IT team to look at it and prevent the message from reaching others. Not reporting a suspected phishing message could lead to friends, family or colleagues falling victim to the message.
Priority Tier
Behaviours in SebDB are ranked by their impact on risk. Tier 1 behaviours have the biggest impact, Tier 4 behaviours the least.

Risk Mitigated

Account Compromise
Account compromise happens when unauthorised people access them.
Further reading
https://www.cisa.gov/uscert/ncas/tips/ST04-014
https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email