Phishing background

Don’t Get Hooked: Phishing Simulations Coming Soon

a red anglerfish with a key instead of a light with a no symbol across itThis October, SMU is rolling out a series of initiatives as part of Cybersecurity Awareness Month to help students, faculty, and staff stay safe online — both on campus and at home.

As part of these efforts, the Information Security team will launch phishing simulations designed to help our community recognize and avoid email-based scams. These simulations aren’t about “catching” anyone — they’re a chance to practice spotting red flags and build habits that protect you and our university.

Why It Matters

Phishing is one of the biggest threats facing colleges and universities today. Criminal groups target schools year-round, often using fake login portals, cloned emails, and even fraudulent forms to steal passwords, financial aid, and payroll information.

These attacks spike during high-stress times like the start of the semester and financial aid deadlines, and they’re getting harder to spot thanks to widely available phishing kits and automated tools.

Even companies like Amazon — which took down 55,000 phishing websites in 2024 — can’t stop every scam. That’s why awareness and quick action are our best defenses.

How You Can Stay Safe

While we’ll be sharing new training and resources in October, you can start protecting yourself now:

Recognize the Red Flags
Watch for:

  • Urgent messages demanding quick action
  • Requests for money or personal information
  • Suspicious links (e.g., amazan.com instead of amazon.com)
  • Shortened or unfamiliar URLs

Keep in mind: AI-generated emails often have perfect grammar and formatting—so don’t rely on spelling mistakes alone.

Resist and Report
If something feels off:

  • Don’t click links or download attachments
  • Hover over links to preview where they lead
  • Use “Report phishing” in your email client or forward suspicious messages to abuse@smu.edu

Check Links Before You Click
Use free online tools like VirusTotal, Hybrid Analysis, or Any.Run to scan suspicious links and attachments—no technical experience needed.

What’s Next

Cybersecurity Awareness Month will bring more opportunities to practice your skills, learn new tips, and protect your personal and university data. When you see a phishing simulation in your inbox, treat it as a safe way to sharpen your instincts.

In the meantime, you can explore free security tips from CISA’s “Secure Our World” videos and start using link-checking tools to stay safe.

At SMU, we stand together against cyber threats, supporting one another to keep our campus safe for learning and working.

Published by

Corrina Taylor

Corrina Taylor is the Chief Information Security Officer (CISO) at SMU’s Office of Information Technology, bringing nearly a decade of hands-on experience in cybersecurity. With a strong foundation in information assurance and a track record of building global security programs from the ground up, Corrina specializes in aligning cybersecurity with business strategy, regulatory compliance, and risk management. She holds a Master’s in Information Security Engineering from the SANS Technology Institute and multiple industry certifications, including CISSP and SANS GIAC. Corrina is passionate about fostering resilient security cultures, leveraging emerging technologies, and empowering teams to stay ahead of evolving threats.