Simulated phishing test

This was a phishing simulation from eComID IT

No harm done, and nothing you typed was captured, sent, or stored — this page reads no fields. But had this been the real thing, entering your password would have handed an attacker your JumpCloud account and every device it manages. This exercise was authorised by management and run by the ISMS team; the result is not used for any disciplinary purpose.

What should have given it away:

The real sender was no-reply@id.ecomid.dev — tap the sender name to expand it. JumpCloud mails come from @jumpcloud.com.
The link went to id.ecomid.dev (a .dev address), not console.jumpcloud.com.
It pressured you with a same-day deadline.
Real password resets don't ask for your current password via an email link.

Please take the 5-minute refresher. When in doubt, forward suspicious mail to security@ecomid.com or use Gmail's Report phishing.

Start the 5-minute training

Questions? Ask #security or Otto. Thanks for helping keep eComID safe.