City employees receive urgent email messages claiming they must ‘reset your cloud password today’ via a link that does not match the official identity portal. What type of suspicious activity is this?
Select an answer to reveal the explanation.
Short Explanation
Fake ‘reset your password’ mail is the oldest trick with a cloud paint job. If the link isn’t the city’s real identity portal, treat it like a phishing lure fishing for cloud keys. Hover, verify, and report—don’t type the password into a stranger’s form.
Full Explanation
Phishing and social engineering remain primary paths to cloud credential theft. Messages that pressure users to reset passwords through unofficial URLs attempt to harvest interactive or federated credentials. Municipal defenders should train staff to validate portal destinations and correlate reported lures with identity and email security telemetry.