1. Social engineering

2. Staff from EduTech College clicked the link and entered their details without checking the email’s authencity.

3. Ways to prevent form being in the incidents in the future is be cautious of anyone you do not know who is trying to gain access throught you.

   Second ways to avoid such incidents in the future is never give sensitive information over the phone of through e-mail.

• Phishing attack

• Ransomware attack

Question 2

• The staff clicked on the link that the fake email sent and entered their login details without verifying the authenticity of the email

Question 3

• Keep systems and antivirus software updated

• Use email filtering to block suspicious messages

1.Social Engineering

-Phishing

2.They trust and click the suspicious link without verifying its authenticity.

3.Two-factor authentication

-To block unauthorised log in even the credentials are stolen.

1.Social engineering (pishing attack)

2.staff clicked on the link and entered their details without verifying the authenticity of the email

3.->Awareness & Training
-Conduct regular cybersecurity training to educate staff about phishing emails and social engineering.

2.   The main mistake they made were they click the link and entered their login details without checking and verifying.

3. Staff training to train awareness against phishing or getting scammed.

• Strong security software.

• Backup data to avoid loss of data