Phishing Attacks Are on the Rise! What to Look Out for and What to Do

We’re currently seeing a noticeable increase in phishing attacks across multiple environments.

What’s particularly concerning is that these emails are becoming more sophisticated and are often designed to look completely legitimate, making them harder to spot at a glance.

This blog explains what we’re seeing, common examples of phishing emails, and some quick, practical tips to help you and your staff stay safe.

What We’re Seeing Right Now

The phishing emails currently circulating often appear convincing and familiar. Common examples include:

• SharePoint or OneDrive file links

• Document sharing notifications

• Email attachments appearing to come from known contacts or suppliers

  
  

In many cases, attackers are using social engineering techniques, meaning the email may appear to come from someone you know or trust, such as a colleague, manager, or external supplier. Once a link is clicked or credentials are entered, attackers can gain access to mailboxes, files, or even wider systems.

Why Phishing Emails Are Harder to Spot

Modern phishing attacks are often no longer full of spelling mistakes or suspicious formatting. Instead, they often:

• Use real company branding and logos

• Contain believable language and context

• Reference genuine services such as Microsoft 365

• Arrive at busy times of day to encourage quick action

  
  

This makes user awareness more important than ever.

Quick Tips to Help Spot a Phishing Email

Here are some simple checks everyone should be encouraged to follow:

🔍 1. Check the Sender Carefully

Don’t rely on the display name alone. Click or tap to view the full email address and look for:

• Slight misspellings

• Extra characters

• Unexpected domains

  
  

🔗 2. Be Cautious With Links

Hover over links (without clicking) to see where they really lead. Be wary if:

• The link doesn’t match the text

• It asks you to sign in unexpectedly

  
  

📎 3. Treat Unexpected Attachments With Caution

Even if the email appears to come from a known contact, pause if you weren’t expecting a document or file.

⏰ 4. Watch for Urgency or Pressure

Phishing emails often try to rush you with messages like:

• “Action required immediately”

• “Your access will be removed”

• “You must review this document now”

What to Do If You’re Not Sure

If something doesn’t feel right:

• ❌ Don’t click links or open attachments

• ✅ Report the email to your IT team

• ✅ Delete it once reported

  
  

If you think you may have already clicked a link or entered details, contact IT immediately (that's us! - IT support for organisations). Acting quickly can significantly reduce the impact.

How IT Support Helps Reduce Phishing Risk

Good IT support plays a key role in protecting organisations from phishing by:

• Implementing advanced email filtering

• Monitoring for suspicious activity

• Enforcing multi‑factor authentication (MFA)

• Providing regular user awareness guidance

Technology helps — but informed users are still the strongest defence.

In Summary

Phishing attacks are increasing, and they’re becoming harder to distinguish from genuine emails. Being aware of what to look for and knowing what to do can make a huge difference.

If you’d like to review your organisation’s email security or user awareness measures, our team is always happy to help.

#phishingattacks, #phishingemails, #emailsecurity, #Microsoft365phishing, #cybersecurityawareness, #ITsupport, #managedITservices, #phishingprotection