Employee Reference
Cyber Security
Stay informed about cyber threats and protect yourself and the company. Report anything suspicious to IT immediately.
Report an Incident
Contact BeCloudSmart immediately
Email Quarantine
Review blocked emails
My Security Info
Manage MFA & sign-in methods
Phishing & Social Engineering
Phishing & Social Engineering
Phishing is the most common cyber attack targeting Westlink employees. Attackers impersonate trusted contacts or services to steal credentials, install malware, or redirect payments.
Red flags to watch for
- Urgency or pressure — "Your account will be locked in 24 hours" or "CEO needs this wire transfer now"
- Unexpected attachments — especially .zip, .exe, .docm, or password-protected files from unknown senders
- Mismatched sender details — display name says "Nigerian Prince" but email is from totally-legit-prince-2024@gmail.com
- Login pages that look slightly off — always check the URL bar shows
login.microsoftonline.combefore entering credentials - Requests to change bank details — always verify via phone using a known number, never the one in the email
- QR codes in emails — a growing tactic ("quishing") that bypasses email link scanning
What to do
- Don't click links or open attachments if anything feels off
- Use the Report Message button in Outlook (ribbon → Report Message → Phishing)
- Forward suspicious emails to your IT manager or BeCloudSmart
- If you've already clicked or entered credentials, contact BeCloudSmart immediately — speed matters
Passwords & Multi-Factor Authentication
Passwords & Multi-Factor Authentication
Your Microsoft 365 account is the gateway to company data. A compromised password with no MFA gives an attacker full access to email, SharePoint, Teams, and OneDrive.
Password best practices
- Passkeys are preferred — where available, use passkeys instead of passwords. They're phishing-resistant and eliminate password reuse entirely
- Use a passphrase — 4+ random words are stronger and easier to remember than complex short passwords
- Never reuse your Westlink password on personal accounts
- Use a password manager for personal accounts (e.g. 1Password, Bitwarden, SafeInCloud)
- Never share passwords via email, Teams, or text
MFA requirements
- MFA is mandatory for all Westlink accounts
- Use the Microsoft Authenticator app (push notifications, not SMS)
- Never approve an MFA prompt you didn't initiate — this means someone has your password
- Register a backup method at mysignins.microsoft.com
Useful Links
Useful Links
Need help or seen something suspicious?
Contact your IT manager or BeCloudSmart — no incident is too small to report. Early reporting prevents breaches.