Awareness
Knowledge today. A safer tomorrow.
Our awareness guides pick up where the diagnostic leaves off: a sign-in that showed up out of nowhere, a document someone supposedly shared with you, a verification screen, an instruction to paste something into a terminal.
Start here
Phishing follows the task you were trying to finish
A practical way to assess the origin, purpose and consequence of the next action.
Read the guide →
Execution
ClickFix & TermFix
A verification or troubleshooting story asks someone to run instructions locally.
Read the guide →
Authorization
Who asked you to enter that code?
A supplied code connects genuine Microsoft sign-in to a client waiting elsewhere.
Read the guide →
Authenticated sessions
A successful sign-in, with someone in the middle
A phishing proxy relays the exchange and captures the authenticated session.
Read the guide →First-person story
I almost ran the malware myself
A credible technical tutorial and the decision to pause before executing its command.
Read the guide →Begin with the context
Ask how you actually got here, what kicked this off, and whether what's being asked matches what you were originally trying to do. A polished page doesn't mean a safe request. The individual guides show where to pause and what to report.
Use Learn to understand browser and account signals, or follow the artifacts into the original Research investigations.