IT Announcements

Enhancing Our Defense: Introducing Phishing Simulations and a New Reporting Tool

November 21, 2025

To combat the recent surge in sophisticated phishing attacks targeting our community, OIT is stepping up our security awareness program.

You've just completed your annual training, and now we're moving from theory to practice. We are launching a series of simulated phishing exercises to sharpen our collective defense.

What to Expect

  • Quarterly Simulated Phishing Emails will be sent to faculty and staff via the KnowBe4 platform; the same platform you used for security awareness training.
  • These exercises use real-world examples to give you hands-on experience in spotting and avoiding threats. This practical approach is designed to help you more effectively recognize and respond to actual phishing attempts.

Introducing the Phish Alert Button (PAB)
To make reporting threats faster and easier, we've integrated a powerful new tool into UA email environments: the Phish Alert Button (PAB).

This friendly orange hook button (see examples below for Google and Outlook) is a significant upgrade:

  • Faster, More Effective Reporting: It offers a quicker and more direct way to report suspicious messages than the native reporting tools.
  • Instant Feedback: When you report a simulated phishing email using the PAB, you'll get immediate feedback confirming your successful action.
  • Risk Free: There's no harm in reporting a suspicious message. If the email is legitimate, it will be returned to you. If not, then you saved yourself a lot of heartache.

This enhancement is a key step in strengthening the security of the entire UA community. Keep an eye out for our first simulation, and remember: if you see something suspicious, click the hook!

Image of sidebar in Google showing Phish Alert Button

image of phish alert button in google search bar

Other Ways of Reporting
The Phish Alert Button will not display in third party mail clients, such as Thunderbird or your cell phone’s mail application. Don’t see the hook? You can still report! Forward suspected phishing emails to ua-phishing@alaska.edu.

Do you have questions about the upcoming simulated phishing exercises? Check out our FAQ section on the Security Matters - Training page or reach out to us at ua-securityaware@alaska.edu, and we’ll be happy to assist you. 

Thank you for helping keep the UA community safe and secure!