{"id":3675,"date":"2026-10-30T18:16:16","date_gmt":"2026-10-31T01:16:16","guid":{"rendered":"https:\/\/cyber.mag212.com\/tools\/phishing-quiz\/"},"modified":"2026-10-31T10:42:03","modified_gmt":"2026-10-31T17:42:03","slug":"phishing-quiz","status":"publish","type":"page","link":"https:\/\/cyber.mag212.com\/fr\/tools\/phishing-quiz\/","title":{"rendered":"Quiz sur l&#039;hame\u00e7onnage\u00a0: saurez-vous rep\u00e9rer le faux courriel\u00a0?"},"content":{"rendered":"\n<style>\n.m212pq{--bg:#0a0f15;--panel:#0f1720;--panel2:#121c27;--line:#1f2d3a;--line2:#2a3b4b;--ink:#e6edf3;--mute:#9fb0c0;--green:#3ee6a0;--red:#ff5468;--cyan:#3cc8f0;--amber:#f6b544;font-family:Inter,system-ui,-apple-system,\"Segoe UI\",sans-serif;color:var(--ink);line-height:1.6;font-size:16px}\n.m212pq *{box-sizing:border-box}\n.m212pq h2,.m212pq h3,.m212pq p,.m212pq ul{margin:0}\n.m212pq a{color:var(--cyan)}\n.m212pq .hero{position:relative;background:radial-gradient(ellipse at 90% 0%,rgba(62,230,160,.14),transparent 60%),var(--bg);border:1px solid var(--line);border-radius:14px;padding:34px 30px;overflow:hidden;margin-bottom:22px}\n.m212pq .hero::before{content:\"\";position:absolute;left:0;right:0;top:0;height:4px;background:linear-gradient(90deg,var(--green),var(--cyan) 60%,var(--red))}\n.m212pq .kick{font-size:12px;font-weight:800;letter-spacing:.2em;text-transform:uppercase;color:var(--cyan);margin-bottom:8px}\n.m212pq .hero h2{font-size:clamp(26px,4.6vw,40px);line-height:1.15;color:#fff;margin-bottom:12px;border:0;padding:0}\n.m212pq .hero h2 span{color:var(--green)}\n.m212pq .hero p{color:var(--mute);max-width:640px}\n.m212pq .panel{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:22px;margin-bottom:18px}\n.m212pq .top{display:flex;justify-content:space-between;align-items:center;gap:12px;margin-bottom:12px;font-size:13px;color:var(--mute);font-weight:700}\n.m212pq .bar{height:6px;background:var(--panel2);border-radius:6px;overflow:hidden;margin-bottom:18px}\n.m212pq .bar i{display:block;height:100%;width:0;background:linear-gradient(90deg,var(--green),var(--cyan));transition:width .3s}\n.m212pq .mail{background:#f7f9fb;color:#1b2430;border-radius:10px;overflow:hidden;border:1px solid #d5dde6}\n.m212pq .mh{padding:14px 16px;border-bottom:1px solid #e1e7ee;font-size:14px;line-height:1.5}\n.m212pq .mh .row{display:flex;gap:8px;flex-wrap:wrap}\n.m212pq .mh .lbl{color:#6b7785;min-width:58px}\n.m212pq .mh .addr{color:#55606d}\n.m212pq .mh .subj{font-weight:800;font-size:16px;margin-top:4px;color:#111}\n.m212pq .chan{display:inline-block;font-size:11px;font-weight:800;letter-spacing:.08em;text-transform:uppercase;background:#e6edf5;color:#3a4a5c;border-radius:4px;padding:2px 6px;margin-bottom:6px}\n.m212pq .mb{padding:16px;font-size:15px;white-space:pre-line}\n.m212pq .fake-link{color:#1a5fd0;text-decoration:underline;cursor:help;font-weight:600}\n.m212pq .att{display:inline-flex;align-items:center;gap:6px;margin:0 16px 16px;padding:8px 12px;border:1px solid #cfd8e2;border-radius:8px;background:#fff;font-size:13px;font-weight:700;color:#2a3644}\n.m212pq .hint{font-size:12px;color:var(--mute);margin-top:8px}\n.m212pq .choices{display:grid;grid-template-columns:1fr 1fr;gap:12px;margin-top:18px}\n.m212pq .choice{padding:14px;border-radius:10px;border:2px solid var(--line2);background:var(--panel2);color:var(--ink);font:800 16px Inter,system-ui,sans-serif;cursor:pointer}\n.m212pq .choice:hover:not(:disabled){border-color:var(--cyan)}\n.m212pq .choice.phish{border-color:#5a2a33}\n.m212pq .choice.legit{border-color:#1f4a3a}\n.m212pq .choice:disabled{cursor:default;opacity:.55}\n.m212pq .choice.picked{opacity:1;outline:3px solid var(--cyan);outline-offset:2px}\n.m212pq .fb{display:none;margin-top:18px;border-radius:10px;padding:16px 18px;border:1px solid var(--line2);background:var(--panel2)}\n.m212pq .fb.show{display:block}\n.m212pq .fb.ok{border-left:5px solid var(--green)}\n.m212pq .fb.bad{border-left:5px solid var(--red)}\n.m212pq .fb h4{margin:0 0 6px;font-size:17px;color:#fff}\n.m212pq .fb ul{padding-left:20px;margin:8px 0 0;color:#cad6e2}\n.m212pq .fb li{margin:4px 0}\n.m212pq .next{margin-top:14px;padding:11px 18px;border:0;border-radius:9px;background:var(--green);color:#06130d;font:800 15px Inter,system-ui,sans-serif;cursor:pointer}\n.m212pq .result{display:none;text-align:center}\n.m212pq .result.show{display:block}\n.m212pq .score{font-size:56px;font-weight:900;color:#fff;line-height:1}\n.m212pq .score small{font-size:22px;color:var(--mute)}\n.m212pq .rating{font-size:20px;font-weight:800;margin:10px 0 6px}\n.m212pq .tips{text-align:left;margin:18px auto 0;max-width:620px;background:var(--panel2);border:1px solid var(--line2);border-radius:10px;padding:16px 18px}\n.m212pq .tips h4{margin:0 0 8px;color:#fff}\n.m212pq .tips ol{margin:0;padding-left:20px;color:#cad6e2}\n.m212pq .tips li{margin:5px 0}\n.m212pq .cta{display:flex;flex-wrap:wrap;gap:10px;justify-content:center;margin-top:18px}\n.m212pq .btn{display:inline-flex;align-items:center;padding:11px 18px;border-radius:9px;font:800 15px Inter,system-ui,sans-serif;border:1px solid var(--line2);background:var(--panel2);color:var(--ink);cursor:pointer;text-decoration:none}\n.m212pq .btn.primary{background:var(--green);border-color:var(--green);color:#06130d}\n.m212pq .links{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:10px}\n.m212pq .links a{display:block;background:var(--panel2);border:1px solid var(--line2);border-radius:10px;padding:12px 14px;text-decoration:none;color:var(--ink);font-weight:700}\n.m212pq .links a span{display:block;color:var(--mute);font-weight:400;font-size:13px;margin-top:2px}\n.m212pq code.dom{font:13px ui-monospace,Menlo,Consolas,monospace;background:#0b1520;border:1px solid var(--line2);border-radius:4px;padding:1px 5px;color:#e6edf3;word-break:break-all}\n.m212pq .disc{font-size:13px;color:var(--mute);border-top:1px solid var(--line);padding-top:14px}\n@media(max-width:620px){.m212pq .hero{padding:26px 20px}.m212pq .panel{padding:16px}.m212pq .choices{grid-template-columns:1fr}}\n<\/style>\n<div class=\"m212pq\" id=\"m212pq\">\n\n<section class=\"hero\">\n<div class=\"kick\">MAG212 CYBER &middot; Tools &middot; Stay safe<\/div>\n<h2>Phishing quiz: <span>can you spot the fake?<\/span><\/h2>\n<p>Ten realistic emails and texts. For each one, decide: phish or legit? After every answer you&rsquo;ll see the warning signs a professional would spot. Takes about 3 minutes. Questions are drawn from a pool of 30, so you get a new mix every time. All brands in this quiz are fictional.<\/p>\n<\/section>\n\n<section class=\"panel\" id=\"pq-quiz\" aria-live=\"polite\">\n<div class=\"top\"><span id=\"pq-count\">Question 1 of 10<\/span><span id=\"pq-tally\">Score: 0<\/span><\/div>\n<div class=\"bar\"><i id=\"pq-bar\"><\/i><\/div>\n<div id=\"pq-mail\"><\/div>\n<p class=\"hint\">Tip: tap or hover over a link to see where it really goes.<\/p>\n<div class=\"choices\">\n<button type=\"button\" class=\"choice phish\" data-a=\"phish\">&#9888;&#65039; Phish<\/button>\n<button type=\"button\" class=\"choice legit\" data-a=\"legit\">&#10004;&#65039; Legit<\/button>\n<\/div>\n<div class=\"fb\" id=\"pq-fb\"><\/div>\n<\/section>\n\n<section class=\"panel result\" id=\"pq-result\" aria-live=\"polite\">\n<div class=\"kick\">Your result<\/div>\n<div class=\"score\" id=\"pq-score\">0<small>\/10<\/small><\/div>\n<div class=\"rating\" id=\"pq-rating\"><\/div>\n<p id=\"pq-msg\" style=\"color:var(--mute);max-width:560px;margin:0 auto\"><\/p>\n<div class=\"tips\">\n<h4>The 5 checks that catch most phishing<\/h4>\n<ol>\n<li><b>Read the real domain.<\/b> Look at the part just before the first single &ldquo;\/&rdquo;, read from the right. <code class=\"dom\">northpeakbank.com.secure-login.net<\/code> belongs to <code class=\"dom\">secure-login.net<\/code>.<\/li>\n<li><b>Distrust urgency.<\/b> &ldquo;24 hours&rdquo;, &ldquo;account locked&rdquo;, &ldquo;final notice&rdquo; are pressure tactics.<\/li>\n<li><b>Check the request, not just the sender.<\/b> Gift cards, payment changes, passwords and codes are red flags even from a known name.<\/li>\n<li><b>Never enter a code you didn&rsquo;t ask for.<\/b> Device codes and MFA prompts you didn&rsquo;t start are attacks.<\/li>\n<li><b>Verify another way.<\/b> Type the website yourself, or call a number you already have.<\/li>\n<\/ol>\n<\/div>\n<div class=\"cta\">\n<a class=\"btn primary\" href=\"\/subscribe-free\/\">Get weekly security tips (free)<\/a>\n<button type=\"button\" class=\"btn\" id=\"pq-share\">Share this quiz<\/button>\n<button type=\"button\" class=\"btn\" id=\"pq-retry\">Try a new set<\/button>\n<\/div>\n<\/section>\n\n<section class=\"panel\">\n<h3 style=\"font-size:19px;color:#fff;margin-bottom:12px\">Got a suspicious message right now?<\/h3>\n<div class=\"links\">\n<a href=\"\/tools\/link-checker\/\">Suspicious Link Checker<span>Check a link for warning signs without opening it.<\/span><\/a>\n<a href=\"\/tools\/email-header-analyzer\/\">Email Header Analyzer<span>See where an email really came from.<\/span><\/a>\n<a href=\"\/tools\/password-checker\/\">Password Strength &amp; Breach Checker<span>Clicked and typed your password? Check it.<\/span><\/a>\n<a href=\"\/learn\/incident-response-cheat-sheet\/\">Incident Response Checklist<span>What to do in the first hour if you were hit.<\/span><\/a>\n<\/div>\n<\/section>\n\n<p class=\"disc\">This quiz runs entirely in your browser. Your answers are not sent or stored. All company names, people and addresses are fictional and used for training only.<\/p>\n<\/div>\n<script>\n(function(){\nvar Q=[\n{c:'Email',fn:'PayFlow Security',fa:'security@payflow-account-verify.com',s:'Unusual sign-in detected: confirm within 24 hours',b:'We detected a sign-in to your PayFlow account from a new device in Lagos, Nigeria.\\n\\nIf this wasn\u2019t you, confirm your identity within 24 hours or your account will be permanently locked.',lt:'Secure my account',lu:'https:\/\/payflow-account-verify.com\/login',a:'phish',w:['The domain is payflow-account-verify.com, not payflow.com. Brand name + extra words is a classic lookalike.','24-hour deadline and \u201cpermanently locked\u201d are pressure tactics.','Real security alerts tell you to open the app or type the address yourself.']},\n{c:'Email',fn:'NorthPeak Bank',fa:'alerts@northpeakbank.com',s:'Your October statement is ready',b:'Your monthly statement is now available.\\n\\nTo view it, open the NorthPeak app or type northpeakbank.com into your browser and sign in.\\n\\nWe will never ask for your password, PIN or one-time codes by email.',lt:'',lu:'',a:'legit',w:['Sender domain matches the bank\u2019s real domain.','No link to click, no urgency, no request for information.','It tells you to go to the site yourself, which is exactly what you should do.']},\n{c:'Email',fn:'Daniel Price (CEO)',fa:'daniel.price.ceo@gmail.com',s:'Quick favor - are you at your desk?',b:'I\u2019m in back-to-back meetings and need you to handle something discreetly.\\n\\nPlease buy 5 x $200 gift cards for a client appreciation today and send me photos of the codes. I\u2019ll reimburse you. Keep this between us for now.',lt:'',lu:'',a:'phish',w:['A CEO writing from a personal Gmail address.','Gift cards plus secrecy is the textbook \u201cCEO fraud\u201d pattern.','Always verify money requests by phone or in person, using a number you already have.']},\n{c:'Email',fn:'Accounts Payable',fa:'billing@vendor-billing-portal.net',s:'Overdue invoice #88231 - final notice',b:'Please find attached the overdue invoice. Payment must be made today to avoid late fees and service suspension.',att:'Invoice_88231.pdf.html',a:'phish',w:['The attachment ends in .html, not .pdf. Double extensions hide fake login pages or malware.','\u201cFinal notice\u201d urgency from a generic billing domain you don\u2019t recognise.','Check invoices in your accounting system or with the vendor directly.']},\n{c:'Email',fn:'IT Service Desk',fa:'it-support@yourcompany.com',s:'Planned maintenance: Saturday 2:00-4:00 AM',b:'Email and VPN will be unavailable on Saturday between 2:00 and 4:00 AM while we apply security updates.\\n\\nNo action is needed from you. Questions? Call the service desk on the usual internal number.',lt:'',lu:'',a:'legit',w:['Comes from your own company domain.','Informational only: no link, no attachment, no request.','Points you to a contact channel you already know.']},\n{c:'Text message',fn:'ParcelGo',fa:'+1 (415) 555-0193',s:'',b:'ParcelGo: Your package is on hold due to an unpaid $1.99 redelivery fee. Pay now to avoid return to sender:',lt:'parcelgo-redeliver.info\/pay',lu:'https:\/\/parcelgo-redeliver.info\/pay',a:'phish',w:['Delivery companies don\u2019t text you for tiny fees through odd domains.','The small amount is the bait: the real goal is your card details.','Track parcels only in the official app or by typing the carrier\u2019s address.']},\n{c:'Email',fn:'Shared Documents',fa:'noreply@docs-share-center.com',s:'Q4 budget review shared with you',b:'A document has been shared with you.\\n\\nTo open it, go to microsoft.com\/devicelogin and enter this code:\\n\\nK7Q-2XM9\\n\\nThe code expires in 15 minutes.',lt:'',lu:'',a:'phish',w:['This is a device-code phishing attack: the Microsoft page is real, but the code hands your signed-in session to the attacker.','You never need to enter a device code to open a shared document.','Only enter device codes for something you started yourself, like signing in on a TV.']},\n{c:'Email',fn:'ExampleShop',fa:'no-reply@exampleshop.com',s:'Reset your password',b:'We received a request to reset the password for your ExampleShop account.\\n\\nIf this was you, use the link below within 30 minutes. If it wasn\u2019t, ignore this email: your password won\u2019t change.',lt:'Reset password',lu:'https:\/\/www.exampleshop.com\/account\/reset',a:'legit',w:['Sender and link both use the shop\u2019s own domain.','It expects you might not have asked and tells you to simply ignore it.','Treat it as legit only if you actually just requested a reset.']},\n{c:'Email',fn:'HR Department',fa:'hr@yourcompany-benefits.com',s:'2027 salary adjustment letter',b:'Your updated compensation letter for 2027 is ready. Please review and sign by end of day.',lt:'View document on SharePoint',lu:'https:\/\/yourcompany-benefits.com\/sharepoint\/login',a:'phish',w:['yourcompany-benefits.com is not your company\u2019s domain, just your company\u2019s name plus a word.','The link says SharePoint but goes to an outside site.','Salary and HR lures are among the most clicked. Open HR documents from your intranet directly.']},\n{c:'Email',fn:'Mail Administrator',fa:'admin@mailbox-quota-center.net',s:'Your mailbox is 98% full',b:'Your mailbox has reached its storage limit. Incoming messages will be rejected.\\n\\nUpgrade your storage now to keep receiving email.',lt:'Upgrade storage',lu:'https:\/\/mailbox-quota-center.net\/upgrade?user=you',a:'phish',w:['Generic \u201cmail administrator\u201d sender from an unrelated domain.','Threat of lost email to make you act fast.','Your real IT team or email provider shows storage warnings inside the mail app.']},\n{c:'Email',fn:'Voicemail System',fa:'voicemail@vm-notify-service.com',s:'New voicemail (0:42) from +1 (312) 555-0148',b:'You have received a new voicemail message.\\n\\nOpen the attachment to listen.',att:'VM_0042_audio.htm',a:'phish',w:['Voicemail doesn\u2019t arrive as an .htm file: that\u2019s a web page, usually a fake login.','The sender domain has nothing to do with your phone system.','Check voicemail in your phone or Teams-style app directly.']},\n{c:'Email',fn:'IT Security Team',fa:'security@yourcompany-mfa.com',s:'Action required: re-register your MFA today',b:'Due to a security upgrade, all staff must re-register multi-factor authentication by 5 PM today.\\n\\nScan the QR code below with your phone camera to continue.\\n\\n[ QR CODE ]',lt:'',lu:'',a:'phish',w:['QR-code phishing (\u201cquishing\u201d) moves you to your phone, where links are harder to inspect and corporate filters can\u2019t help.','yourcompany-mfa.com is a lookalike, not your company\u2019s domain.','Deadline pressure plus a security pretext is a classic combination.']},\n{c:'Email',fn:'CloudNest',fa:'no-reply@cloudnest.com',s:'New sign-in to your CloudNest account',b:'We noticed a new sign-in from Chrome on Windows.\\n\\nIf this was you, there\u2019s nothing to do. If it wasn\u2019t, open the CloudNest app and go to Settings \u2192 Security to review your devices.',lt:'',lu:'',a:'legit',w:['Sender matches the service\u2019s real domain.','No link and no request: it sends you to the app yourself.','\u201cIf this was you, do nothing\u201d is how genuine alerts are written.']},\n{c:'Text message',fn:'TollPass',fa:'+1 (602) 555-0177',s:'',b:'TollPass: You have an unpaid toll balance of $4.85. Pay today to avoid a $50 late fee:',lt:'tollpass-payments.top\/pay',lu:'https:\/\/tollpass-payments.top\/pay',a:'phish',w:['Unpaid-toll texts are one of the most common SMS scams right now.','.top domain, tiny amount, big threatened fine: all bait for your card details.','Check any toll balance by typing the official toll website yourself.']},\n{c:'Email',fn:'Brightline Supplies - Accounts',fa:'accounts@brightlinesupplies.co',s:'Updated bank details for future payments',b:'Hello,\\n\\nPlease note we have changed banks. Kindly update our remittance details before your next payment run. New details attached.\\n\\nThank you,\\nAccounts Team',att:'New_Bank_Details.pdf',a:'phish',w:['The domain ends in .co, not .com: one missing letter.','Changing bank details by email is the core of invoice fraud (business email compromise).','Always confirm payment changes by calling the supplier on a number you already have.']},\n{c:'Email',fn:'Maria Lopez',fa:'maria.lopez@yourcompany.com',s:'Team sync moved to 3:00 PM',b:'Hi all,\\n\\nThe team sync is moving from 2:00 to 3:00 PM today, same room. The calendar invite is updated.\\n\\nMaria',lt:'',lu:'',a:'legit',w:['Internal sender on your company domain.','Routine information with no link, attachment or request.','Nothing to click and nothing to give away.']},\n{c:'Email',fn:'OfficeSuite Accounts',fa:'no-reply@officesuite-passwordreset.com',s:'Your password expires today',b:'Your account password expires in 4 hours. To keep using your current password, confirm it below.',lt:'Keep current password',lu:'https:\/\/officesuite-passwordreset.com\/keep',a:'phish',w:['\u201cKeep your current password\u201d buttons exist only in phishing.','Lookalike domain built from the product name plus \u201cpasswordreset\u201d.','Password expiry is handled when you sign in normally, never through an emailed link.']},\n{c:'Email',fn:'StreamHub Copyright',fa:'copyright@streamhub-appeals-center.com',s:'Copyright violation: your channel will be deleted in 24 hours',b:'Your recent upload violated our copyright policy. Your channel will be permanently deleted unless you submit an appeal within 24 hours.',lt:'Submit appeal',lu:'https:\/\/streamhub-appeals-center.com\/appeal',a:'phish',w:['Creators are targeted with fake copyright strikes to steal their account logins.','The appeals site is not the platform\u2019s own domain.','Real strikes appear in your account dashboard.']},\n{c:'Text message',fn:'NorthPeak Bank',fa:'72745',s:'',b:'(Context: you just tried to sign in on the NorthPeak website.)\\n\\nNorthPeak Bank: Your sign-in code is 482913. We will never call or text you to ask for this code. Don\u2019t share it.',lt:'',lu:'',a:'legit',w:['You started the sign-in, so a code arriving now is expected.','It warns you never to share the code and contains no link.','If a code arrives when you did NOT sign in, someone has your password: change it.']},\n{c:'Text message',fn:'NorthPeak Fraud Team',fa:'+1 (213) 555-0102',s:'',b:'NorthPeak ALERT: A $1,240.00 payment at TechMart was blocked. To secure your account, verify your card now:',lt:'northpeak-secure-verify.com',lu:'https:\/\/northpeak-secure-verify.com\/card',a:'phish',w:['The link goes to northpeak-secure-verify.com, not the bank\u2019s domain.','Real fraud alerts never ask you to enter your full card details.','Call the number on the back of your card instead.']},\n{c:'Email',fn:'Jordan Ellis via Dropzone',fa:'share@dropzone-files.net',s:'Jordan shared \u201cQ3 Salaries.xlsx\u201d with you',b:'Jordan Ellis shared a file with you.\\n\\nQ3 Salaries.xlsx',lt:'Open file',lu:'https:\/\/dropzone.com.file-view.app\/s\/Q3-salaries',a:'phish',w:['Read the domain from the right: dropzone.com.file-view.app belongs to file-view.app.','A salary file is a tempting lure designed to make you curious.','Open shared files from inside the sharing service, not from email links.']},\n{c:'Email',fn:'ExampleShop',fa:'orders@exampleshop.com',s:'Your order #1042 has shipped',b:'Good news: your order has shipped and should arrive Thursday.\\n\\nYou can track it anytime in your account.',lt:'Track order',lu:'https:\/\/www.exampleshop.com\/account\/orders\/1042',a:'legit',w:['Sender and link both use the shop\u2019s own domain.','Matches an order you actually placed, with no payment request.','Even so, tracking via the app or website you already use is a good habit.']},\n{c:'Email',fn:'Talent Team',fa:'recruiter.hiring2026@outlook.com',s:'Remote data entry job: $45\/hour, start Monday',b:'Your profile was selected for a remote data-entry role. $45\/hour, flexible hours, no interview needed.\\n\\nMessage our hiring manager on WhatsApp to receive your starter kit.',lt:'',lu:'',a:'phish',w:['Too good to be true: high pay, no interview, instant start.','Free email address and a move to WhatsApp avoid company scrutiny.','These scams end with fake cheques, \u201cequipment fees\u201d or identity theft.']},\n{c:'Email',fn:'CryptoWallet Rewards',fa:'rewards@cw-airdrop-claim.io',s:'You received 0.25 BTC: claim within 48 hours',b:'Congratulations! You have been allocated 0.25 BTC in our loyalty airdrop.\\n\\nConnect your wallet to claim before it expires.',lt:'Claim now',lu:'https:\/\/cw-airdrop-claim.io\/connect',a:'phish',w:['Free crypto you never asked for is always bait.','\u201cConnect your wallet\u201d pages drain wallets once you approve.','Deadline pressure again.']},\n{c:'Email',fn:'Revenue Office',fa:'refunds@tax-agency-refund.org',s:'Tax refund of $482.19 pending',b:'After the annual review of your account, you are eligible for a refund of $482.19.\\n\\nConfirm your bank details to receive payment within 3 days.',lt:'Claim refund',lu:'https:\/\/tax-agency-refund.org\/claim',a:'phish',w:['Tax agencies don\u2019t email refund links asking for bank details.','The odd exact amount is meant to look official.','Check refunds only through the official government site you type yourself.']},\n{c:'Email',fn:'CodeVault',fa:'noreply@codevault.com',s:'A new SSH key was added to your account',b:'The following SSH key was added to your account: laptop-2026.\\n\\nIf you didn\u2019t add this key, remove it immediately in Settings \u2192 SSH keys.',lt:'Review SSH keys',lu:'https:\/\/codevault.com\/settings\/keys',a:'legit',w:['Sender and link both use the service\u2019s real domain.','A security notification that asks nothing from you.','If you didn\u2019t add the key, go to the site yourself and remove it.']},\n{c:'Email',fn:'ShieldGuard Billing',fa:'billing.shieldguard@gmail.com',s:'Your subscription renewed: $399.99',b:'Thank you for renewing ShieldGuard Total Protection.\\n\\nAmount charged: $399.99\\n\\nIf you did not authorise this renewal, call our billing desk within 24 hours: +1 (888) 555-0199',lt:'',lu:'',a:'phish',w:['Callback phishing: no link, so filters miss it. The phone call is the trap.','A security company using a Gmail address.','The \u201cagent\u201d will ask for remote access or a refund to your card.']},\n{c:'Push notification',fn:'Authenticator app',fa:'Sign-in request',s:'Approve sign-in?',b:'(Context: you are not signing in to anything. This is the 6th request in 10 minutes.)\\n\\nSign-in attempt to your YourCompany account\\nLocation: Bucharest, Romania\\n\\n[ Deny ]   [ Approve ]',lt:'',lu:'',a:'phish',w:['MFA fatigue attack: the attacker already has your password and spams prompts hoping you tap Approve.','Never approve a prompt you didn\u2019t start.','Deny it, change your password and tell IT straight away.']},\n{c:'Email',fn:'HR Department',fa:'hr@yourcompany.com',s:'Reminder: benefits enrollment closes Nov 15',b:'Open enrollment closes on November 15.\\n\\nLog in to the HR portal through the intranet as usual to review your choices. Questions? Contact HR on the usual extension.',lt:'',lu:'',a:'legit',w:['Internal domain, no link, no attachment.','It sends you to the portal you already use.','Compare with the earlier HR lookalike: the domain is the difference.']},\n{c:'Text message',fn:'ShopMart Rewards',fa:'+1 (305) 555-0136',s:'',b:'ShopMart: Congratulations! You\u2019ve been selected for a $500 gift card. Complete a 30-second survey to claim:',lt:'shopmart-rewards.click\/claim',lu:'https:\/\/shopmart-rewards.click\/claim',a:'phish',w:['Unexpected prizes are bait.','.click domain unrelated to the store.','The \u201csurvey\u201d ends by asking for card details for \u201cshipping\u201d.']}\n];\nfunction shuffle(a){a=a.slice();for(var k=a.length-1;k>0;k--){var j=Math.floor(Math.random()*(k+1)),t=a[k];a[k]=a[j];a[j]=t}return a}\nvar FR=(document.documentElement.lang||'').toLowerCase().indexOf('fr')===0;\nvar T=FR?{q:'Question ',of:' sur ',sc:'Score : ',from:'De',ok:'Bonne r\u00e9ponse !',ko:'Pas tout \u00e0 fait.',is:' Ce message est ',ph:'DE L\u2019HAME\u00c7ONNAGE',lg:'L\u00c9GITIME',nx:'Question suivante \u2192',res:'Voir mon r\u00e9sultat \u2192',lk:'Le lien m\u00e8ne \u00e0 : ',\nr9:['Chasseur d\u2019hame\u00e7ons','Excellent. Vous lisez les domaines et les demandes comme un analyste s\u00e9curit\u00e9. Partagez ce quiz avec vos coll\u00e8gues.'],\nr7:['\u0152il aiguis\u00e9','Bons r\u00e9flexes. Revoyez les questions manqu\u00e9es : il suffit d\u2019un seul clic aux attaquants.'],\nr5:['En progr\u00e8s','Vous en avez rep\u00e9r\u00e9 certains, mais quelques-uns vous ont pi\u00e9g\u00e9. Les cinq v\u00e9rifications ci-dessous d\u00e9tectent la plupart des tentatives.'],\nr0:['Risque \u00e9lev\u00e9','L\u2019hame\u00e7onnage fonctionnerait probablement sur vous aujourd\u2019hui. Pas d\u2019inqui\u00e9tude : les cinq v\u00e9rifications ci-dessous changent tout, et nos conseils hebdomadaires aussi.'],\nsh:function(s,n){return 'J\u2019ai obtenu '+s+'\/'+n+' au quiz anti-hame\u00e7onnage de MAG212 CYBER. Ferez-vous mieux ?'},st:'Quiz anti-hame\u00e7onnage',cp:'Lien copi\u00e9 !'}\n:{q:'Question ',of:' of ',sc:'Score: ',from:'From',ok:'Correct!',ko:'Not quite.',is:' This one is ',ph:'PHISHING',lg:'LEGIT',nx:'Next question \u2192',res:'See my result \u2192',lk:'Link goes to: ',\nr9:['Phish hunter','Excellent. You read domains and requests like a security analyst. Share this quiz with colleagues who might not.'],\nr7:['Sharp eye','Good instincts. Review the questions you missed: attackers only need one click.'],\nr5:['Getting there','You caught some, but a few fooled you. The five checks below catch most phishing.'],\nr0:['High risk','Phishing would likely work on you today. Don\u2019t worry: the five checks below make a big difference, and our weekly tips help.'],\nsh:function(s,n){return 'I scored '+s+'\/'+n+' on the MAG212 CYBER phishing quiz. Can you beat me?'},st:'Phishing quiz',cp:'Link copied!'};\nvar QF=[\n{c:'E-mail',fn:'S\u00e9curit\u00e9 PayFlow',s:'Connexion inhabituelle d\u00e9tect\u00e9e : confirmez sous 24 heures',b:'Nous avons d\u00e9tect\u00e9 une connexion \u00e0 votre compte PayFlow depuis un nouvel appareil \u00e0 Lagos, au Nigeria.\\n\\nSi ce n\u2019\u00e9tait pas vous, confirmez votre identit\u00e9 sous 24 heures, sinon votre compte sera d\u00e9finitivement bloqu\u00e9.',lt:'S\u00e9curiser mon compte',w:['Le domaine est payflow-account-verify.com, pas payflow.com. Nom de marque + mots ajout\u00e9s : un sosie classique.','Le d\u00e9lai de 24 heures et le \u00ab blocage d\u00e9finitif \u00bb sont des techniques de pression.','Les vraies alertes vous demandent d\u2019ouvrir l\u2019application ou de saisir l\u2019adresse vous-m\u00eame.']},\n{c:'E-mail',fn:'NorthPeak Bank',s:'Votre relev\u00e9 d\u2019octobre est disponible',b:'Votre relev\u00e9 mensuel est disponible.\\n\\nPour le consulter, ouvrez l\u2019application NorthPeak ou saisissez northpeakbank.com dans votre navigateur et connectez-vous.\\n\\nNous ne vous demanderons jamais votre mot de passe, votre code PIN ou vos codes \u00e0 usage unique par e-mail.',w:['Le domaine de l\u2019exp\u00e9diteur correspond au vrai domaine de la banque.','Aucun lien, aucune urgence, aucune demande d\u2019information.','Il vous invite \u00e0 aller sur le site vous-m\u00eame : c\u2019est exactement le bon r\u00e9flexe.']},\n{c:'E-mail',fn:'Daniel Price (PDG)',s:'Petit service : \u00eates-vous \u00e0 votre bureau ?',b:'J\u2019encha\u00eene les r\u00e9unions et j\u2019ai besoin que vous g\u00e9riez quelque chose en toute discr\u00e9tion.\\n\\nAchetez aujourd\u2019hui 5 cartes cadeaux de 200 $ pour remercier un client et envoyez-moi les photos des codes. Je vous rembourserai. Gardez cela entre nous pour l\u2019instant.',w:['Un PDG qui \u00e9crit depuis une adresse Gmail personnelle.','Cartes cadeaux + secret : le sch\u00e9ma typique de la \u00ab fraude au pr\u00e9sident \u00bb.','V\u00e9rifiez toujours une demande d\u2019argent par t\u00e9l\u00e9phone ou en personne, avec un num\u00e9ro que vous connaissez d\u00e9j\u00e0.']},\n{c:'E-mail',fn:'Comptabilit\u00e9 fournisseurs',s:'Facture impay\u00e9e n\u00b0 88231 : dernier avis',b:'Veuillez trouver ci-joint la facture impay\u00e9e. Le paiement doit \u00eatre effectu\u00e9 aujourd\u2019hui pour \u00e9viter des p\u00e9nalit\u00e9s et la suspension du service.',w:['La pi\u00e8ce jointe se termine par .html, pas .pdf. Les doubles extensions cachent de fausses pages de connexion ou des logiciels malveillants.','Urgence \u00ab dernier avis \u00bb depuis un domaine de facturation g\u00e9n\u00e9rique inconnu.','V\u00e9rifiez les factures dans votre logiciel comptable ou directement aupr\u00e8s du fournisseur.']},\n{c:'E-mail',fn:'Support informatique',s:'Maintenance pr\u00e9vue : samedi de 2 h \u00e0 4 h',b:'La messagerie et le VPN seront indisponibles samedi entre 2 h et 4 h pendant l\u2019application de mises \u00e0 jour de s\u00e9curit\u00e9.\\n\\nAucune action de votre part n\u2019est n\u00e9cessaire. Des questions ? Appelez le support au num\u00e9ro interne habituel.',w:['Vient du domaine de votre propre entreprise.','Purement informatif : ni lien, ni pi\u00e8ce jointe, ni demande.','Vous renvoie vers un contact que vous connaissez d\u00e9j\u00e0.']},\n{c:'SMS',fn:'ParcelGo',s:'',b:'ParcelGo : Votre colis est bloqu\u00e9 en raison de frais de nouvelle livraison impay\u00e9s de 1,99 $. Payez maintenant pour \u00e9viter le retour \u00e0 l\u2019exp\u00e9diteur :',w:['Les transporteurs ne vous envoient pas de SMS pour de petits frais via des domaines \u00e9tranges.','Le petit montant est l\u2019app\u00e2t : le vrai but, ce sont vos coordonn\u00e9es bancaires.','Suivez vos colis uniquement dans l\u2019application officielle ou en saisissant l\u2019adresse du transporteur.']},\n{c:'E-mail',fn:'Documents partag\u00e9s',s:'Budget T4 partag\u00e9 avec vous',b:'Un document a \u00e9t\u00e9 partag\u00e9 avec vous.\\n\\nPour l\u2019ouvrir, rendez-vous sur microsoft.com\/devicelogin et saisissez ce code :\\n\\nK7Q-2XM9\\n\\nLe code expire dans 15 minutes.',w:['C\u2019est une attaque par code d\u2019appareil : la page Microsoft est authentique, mais le code donne votre session connect\u00e9e \u00e0 l\u2019attaquant.','Il ne faut jamais saisir un code d\u2019appareil pour ouvrir un document partag\u00e9.','Ne saisissez un code d\u2019appareil que pour une action que vous avez lanc\u00e9e vous-m\u00eame, comme vous connecter sur une t\u00e9l\u00e9vision.']},\n{c:'E-mail',fn:'ExampleShop',s:'R\u00e9initialisez votre mot de passe',b:'Nous avons re\u00e7u une demande de r\u00e9initialisation du mot de passe de votre compte ExampleShop.\\n\\nSi c\u2019est bien vous, utilisez le lien ci-dessous dans les 30 minutes. Sinon, ignorez cet e-mail : votre mot de passe ne changera pas.',lt:'R\u00e9initialiser le mot de passe',w:['L\u2019exp\u00e9diteur et le lien utilisent le domaine de la boutique.','Il pr\u00e9voit que vous n\u2019ayez rien demand\u00e9 et vous dit simplement d\u2019ignorer le message.','Ne le consid\u00e9rez l\u00e9gitime que si vous venez r\u00e9ellement de demander une r\u00e9initialisation.']},\n{c:'E-mail',fn:'Ressources humaines',s:'Courrier d\u2019ajustement salarial 2027',b:'Votre courrier de r\u00e9mun\u00e9ration 2027 est pr\u00eat. Merci de le consulter et de le signer avant la fin de la journ\u00e9e.',lt:'Voir le document sur SharePoint',w:['yourcompany-benefits.com n\u2019est pas le domaine de votre entreprise, seulement son nom suivi d\u2019un mot.','Le lien affiche SharePoint mais m\u00e8ne vers un site externe.','Les leurres RH et salaire sont parmi les plus cliqu\u00e9s. Ouvrez les documents RH directement depuis votre intranet.']},\n{c:'E-mail',fn:'Administrateur de messagerie',s:'Votre bo\u00eete aux lettres est pleine \u00e0 98 %',b:'Votre bo\u00eete aux lettres a atteint sa limite de stockage. Les messages entrants seront rejet\u00e9s.\\n\\nAugmentez votre espace de stockage d\u00e8s maintenant pour continuer \u00e0 recevoir des e-mails.',lt:'Augmenter le stockage',w:['Exp\u00e9diteur g\u00e9n\u00e9rique \u00ab administrateur \u00bb sur un domaine sans rapport.','Menace de perte d\u2019e-mails pour vous faire agir vite.','Votre vrai service informatique ou fournisseur affiche ces alertes dans l\u2019application de messagerie.']},\n{c:'E-mail',fn:'Messagerie vocale',s:'Nouveau message vocal (0:42) du +1 (312) 555-0148',b:'Vous avez re\u00e7u un nouveau message vocal.\\n\\nOuvrez la pi\u00e8ce jointe pour l\u2019\u00e9couter.',w:['Un message vocal n\u2019arrive pas sous forme de fichier .htm : c\u2019est une page web, g\u00e9n\u00e9ralement une fausse page de connexion.','Le domaine de l\u2019exp\u00e9diteur n\u2019a rien \u00e0 voir avec votre syst\u00e8me t\u00e9l\u00e9phonique.','Consultez votre messagerie vocale directement sur votre t\u00e9l\u00e9phone ou dans votre application.']},\n{c:'E-mail',fn:'\u00c9quipe s\u00e9curit\u00e9 informatique',s:'Action requise : r\u00e9enregistrez votre MFA aujourd\u2019hui',b:'Suite \u00e0 une mise \u00e0 niveau de s\u00e9curit\u00e9, tout le personnel doit r\u00e9enregistrer l\u2019authentification multifacteur avant 17 h aujourd\u2019hui.\\n\\nScannez le QR code ci-dessous avec l\u2019appareil photo de votre t\u00e9l\u00e9phone pour continuer.\\n\\n[ QR CODE ]',w:['L\u2019hame\u00e7onnage par QR code (\u00ab quishing \u00bb) vous fait passer sur votre t\u00e9l\u00e9phone, o\u00f9 les liens sont plus difficiles \u00e0 v\u00e9rifier et o\u00f9 les filtres de l\u2019entreprise ne vous prot\u00e8gent plus.','yourcompany-mfa.com est un domaine sosie, pas celui de votre entreprise.','D\u00e9lai serr\u00e9 + pr\u00e9texte de s\u00e9curit\u00e9 : une combinaison classique.']},\n{c:'E-mail',fn:'CloudNest',s:'Nouvelle connexion \u00e0 votre compte CloudNest',b:'Nous avons remarqu\u00e9 une nouvelle connexion depuis Chrome sous Windows.\\n\\nSi c\u2019\u00e9tait vous, vous n\u2019avez rien \u00e0 faire. Sinon, ouvrez l\u2019application CloudNest et allez dans Param\u00e8tres \u2192 S\u00e9curit\u00e9 pour v\u00e9rifier vos appareils.',w:['L\u2019exp\u00e9diteur correspond au vrai domaine du service.','Ni lien ni demande : il vous renvoie vous-m\u00eame vers l\u2019application.','\u00ab Si c\u2019\u00e9tait vous, ne faites rien \u00bb : c\u2019est ainsi que sont r\u00e9dig\u00e9es les vraies alertes.']},\n{c:'SMS',fn:'TollPass',s:'',b:'TollPass : Vous avez un p\u00e9age impay\u00e9 de 4,85 $. Payez aujourd\u2019hui pour \u00e9viter une p\u00e9nalit\u00e9 de 50 $ :',w:['Les SMS de \u00ab p\u00e9age impay\u00e9 \u00bb font partie des arnaques les plus r\u00e9pandues en ce moment.','Domaine en .top, petit montant, grosse p\u00e9nalit\u00e9 : tout est fait pour obtenir votre carte bancaire.','V\u00e9rifiez un solde de p\u00e9age en saisissant vous-m\u00eame l\u2019adresse du site officiel.']},\n{c:'E-mail',fn:'Brightline Supplies - Comptabilit\u00e9',s:'Nouvelles coordonn\u00e9es bancaires pour vos prochains paiements',b:'Bonjour,\\n\\nNous avons chang\u00e9 de banque. Merci de mettre \u00e0 jour nos coordonn\u00e9es de paiement avant votre prochaine \u00e9ch\u00e9ance. Les nouvelles coordonn\u00e9es sont jointes.\\n\\nCordialement,\\nService comptabilit\u00e9',w:['Le domaine se termine par .co, pas .com : il manque une lettre.','Changer de coordonn\u00e9es bancaires par e-mail, c\u2019est le c\u0153ur de la fraude au faux fournisseur (BEC).','Confirmez toujours un changement de paiement en appelant le fournisseur sur un num\u00e9ro que vous avez d\u00e9j\u00e0.']},\n{c:'E-mail',fn:'Maria Lopez',s:'R\u00e9union d\u2019\u00e9quipe d\u00e9cal\u00e9e \u00e0 15 h',b:'Bonjour \u00e0 tous,\\n\\nLa r\u00e9union d\u2019\u00e9quipe passe de 14 h \u00e0 15 h aujourd\u2019hui, m\u00eame salle. L\u2019invitation du calendrier est mise \u00e0 jour.\\n\\nMaria',w:['Exp\u00e9diteur interne, sur le domaine de votre entreprise.','Information de routine sans lien, pi\u00e8ce jointe ni demande.','Rien \u00e0 cliquer et rien \u00e0 divulguer.']},\n{c:'E-mail',fn:'Comptes OfficeSuite',s:'Votre mot de passe expire aujourd\u2019hui',b:'Le mot de passe de votre compte expire dans 4 heures. Pour conserver votre mot de passe actuel, confirmez-le ci-dessous.',lt:'Conserver mon mot de passe',w:['Les boutons \u00ab conserver votre mot de passe actuel \u00bb n\u2019existent que dans l\u2019hame\u00e7onnage.','Domaine sosie construit \u00e0 partir du nom du produit + \u00ab passwordreset \u00bb.','L\u2019expiration d\u2019un mot de passe se g\u00e8re lors d\u2019une connexion normale, jamais via un lien re\u00e7u par e-mail.']},\n{c:'E-mail',fn:'Droits d\u2019auteur StreamHub',s:'Violation des droits d\u2019auteur : votre cha\u00eene sera supprim\u00e9e dans 24 heures',b:'Votre derni\u00e8re vid\u00e9o enfreint notre politique sur les droits d\u2019auteur. Votre cha\u00eene sera d\u00e9finitivement supprim\u00e9e si vous ne faites pas appel sous 24 heures.',lt:'Faire appel',w:['Les cr\u00e9ateurs sont cibl\u00e9s par de faux avertissements de droits d\u2019auteur pour voler leurs identifiants.','Le site d\u2019appel n\u2019est pas le domaine de la plateforme.','Les vrais avertissements apparaissent dans votre tableau de bord.']},\n{c:'SMS',fn:'NorthPeak Bank',s:'',b:'(Contexte : vous venez d\u2019essayer de vous connecter sur le site de NorthPeak.)\\n\\nNorthPeak Bank : Votre code de connexion est 482913. Nous ne vous appellerons ni ne vous \u00e9crirons jamais pour vous demander ce code. Ne le communiquez pas.',w:['Vous avez lanc\u00e9 la connexion : il est normal de recevoir un code maintenant.','Il vous met en garde contre le partage du code et ne contient aucun lien.','Si un code arrive alors que vous ne vous \u00eates PAS connect\u00e9, quelqu\u2019un a votre mot de passe : changez-le.']},\n{c:'SMS',fn:'Service fraude NorthPeak',s:'',b:'ALERTE NorthPeak : Un paiement de 1 240,00 $ chez TechMart a \u00e9t\u00e9 bloqu\u00e9. Pour s\u00e9curiser votre compte, v\u00e9rifiez votre carte maintenant :',w:['Le lien m\u00e8ne \u00e0 northpeak-secure-verify.com, pas au domaine de la banque.','Les vraies alertes de fraude ne vous demandent jamais de saisir toutes les donn\u00e9es de votre carte.','Appelez plut\u00f4t le num\u00e9ro inscrit au dos de votre carte.']},\n{c:'E-mail',fn:'Jordan Ellis via Dropzone',s:'Jordan a partag\u00e9 \u00ab Q3 Salaries.xlsx \u00bb avec vous',b:'Jordan Ellis a partag\u00e9 un fichier avec vous.\\n\\nQ3 Salaries.xlsx',lt:'Ouvrir le fichier',w:['Lisez le domaine en partant de la droite : dropzone.com.file-view.app appartient \u00e0 file-view.app.','Un fichier de salaires est un app\u00e2t con\u00e7u pour piquer votre curiosit\u00e9.','Ouvrez les fichiers partag\u00e9s depuis le service de partage lui-m\u00eame, pas depuis un lien re\u00e7u par e-mail.']},\n{c:'E-mail',fn:'ExampleShop',s:'Votre commande n\u00b0 1042 a \u00e9t\u00e9 exp\u00e9di\u00e9e',b:'Bonne nouvelle : votre commande a \u00e9t\u00e9 exp\u00e9di\u00e9e et devrait arriver jeudi.\\n\\nVous pouvez la suivre \u00e0 tout moment depuis votre compte.',lt:'Suivre ma commande',w:['L\u2019exp\u00e9diteur et le lien utilisent le domaine de la boutique.','Correspond \u00e0 une commande que vous avez r\u00e9ellement pass\u00e9e, sans demande de paiement.','M\u00eame ainsi, suivre la commande via l\u2019application ou le site que vous utilisez d\u00e9j\u00e0 reste un bon r\u00e9flexe.']},\n{c:'E-mail',fn:'\u00c9quipe recrutement',s:'Saisie de donn\u00e9es \u00e0 distance : 45 $\/heure, d\u00e9but lundi',b:'Votre profil a \u00e9t\u00e9 retenu pour un poste de saisie de donn\u00e9es \u00e0 distance. 45 $\/heure, horaires flexibles, sans entretien.\\n\\n\u00c9crivez \u00e0 notre responsable du recrutement sur WhatsApp pour recevoir votre kit de d\u00e9marrage.',w:['Trop beau pour \u00eatre vrai : salaire \u00e9lev\u00e9, pas d\u2019entretien, d\u00e9marrage imm\u00e9diat.','Adresse e-mail gratuite et passage sur WhatsApp pour \u00e9chapper aux contr\u00f4les.','Ces arnaques finissent en faux ch\u00e8ques, \u00ab frais d\u2019\u00e9quipement \u00bb ou usurpation d\u2019identit\u00e9.']},\n{c:'E-mail',fn:'R\u00e9compenses CryptoWallet',s:'Vous avez re\u00e7u 0,25 BTC : \u00e0 r\u00e9clamer sous 48 heures',b:'F\u00e9licitations ! Vous avez re\u00e7u 0,25 BTC dans le cadre de notre distribution de fid\u00e9lit\u00e9.\\n\\nConnectez votre portefeuille pour les r\u00e9clamer avant expiration.',lt:'R\u00e9clamer maintenant',w:['Des cryptomonnaies gratuites que vous n\u2019avez pas demand\u00e9es sont toujours un app\u00e2t.','Les pages \u00ab connectez votre portefeuille \u00bb le vident d\u00e8s que vous validez.','Encore un d\u00e9lai pour vous presser.']},\n{c:'E-mail',fn:'Service des imp\u00f4ts',s:'Remboursement d\u2019imp\u00f4t de 482,19 $ en attente',b:'Apr\u00e8s examen annuel de votre dossier, vous avez droit \u00e0 un remboursement de 482,19 $.\\n\\nConfirmez vos coordonn\u00e9es bancaires pour recevoir le paiement sous 3 jours.',lt:'Demander le remboursement',w:['L\u2019administration fiscale n\u2019envoie pas de lien de remboursement demandant vos coordonn\u00e9es bancaires.','Le montant pr\u00e9cis et inhabituel sert \u00e0 faire officiel.','V\u00e9rifiez vos remboursements uniquement sur le site officiel, en saisissant l\u2019adresse vous-m\u00eame.']},\n{c:'E-mail',fn:'CodeVault',s:'Une nouvelle cl\u00e9 SSH a \u00e9t\u00e9 ajout\u00e9e \u00e0 votre compte',b:'La cl\u00e9 SSH suivante a \u00e9t\u00e9 ajout\u00e9e \u00e0 votre compte : laptop-2026.\\n\\nSi vous n\u2019avez pas ajout\u00e9 cette cl\u00e9, supprimez-la imm\u00e9diatement dans Param\u00e8tres \u2192 Cl\u00e9s SSH.',lt:'V\u00e9rifier les cl\u00e9s SSH',w:['L\u2019exp\u00e9diteur et le lien utilisent le vrai domaine du service.','Une notification de s\u00e9curit\u00e9 qui ne vous demande rien.','Si vous n\u2019avez pas ajout\u00e9 la cl\u00e9, allez vous-m\u00eame sur le site pour la supprimer.']},\n{c:'E-mail',fn:'Facturation ShieldGuard',s:'Votre abonnement a \u00e9t\u00e9 renouvel\u00e9 : 399,99 $',b:'Merci d\u2019avoir renouvel\u00e9 ShieldGuard Total Protection.\\n\\nMontant d\u00e9bit\u00e9 : 399,99 $\\n\\nSi vous n\u2019avez pas autoris\u00e9 ce renouvellement, appelez notre service facturation sous 24 heures : +1 (888) 555-0199',w:['Hame\u00e7onnage par rappel : pas de lien, donc les filtres ne le d\u00e9tectent pas. Le pi\u00e8ge, c\u2019est l\u2019appel.','Une entreprise de s\u00e9curit\u00e9 qui utilise une adresse Gmail.','Le \u00ab conseiller \u00bb vous demandera un acc\u00e8s \u00e0 distance ou un \u00ab remboursement \u00bb sur votre carte.']},\n{c:'Notification push',fn:'Application d\u2019authentification',s:'Approuver la connexion ?',b:'(Contexte : vous n\u2019\u00eates en train de vous connecter \u00e0 rien. C\u2019est la 6e demande en 10 minutes.)\\n\\nTentative de connexion \u00e0 votre compte YourCompany\\nLieu : Bucarest, Roumanie\\n\\n[ Refuser ]   [ Approuver ]',w:['Attaque par fatigue MFA : l\u2019attaquant a d\u00e9j\u00e0 votre mot de passe et multiplie les demandes en esp\u00e9rant que vous approuviez.','N\u2019approuvez jamais une demande que vous n\u2019avez pas lanc\u00e9e.','Refusez, changez votre mot de passe et pr\u00e9venez imm\u00e9diatement le service informatique.']},\n{c:'E-mail',fn:'Ressources humaines',s:'Rappel : les inscriptions aux avantages sociaux se terminent le 15 novembre',b:'La p\u00e9riode d\u2019inscription se termine le 15 novembre.\\n\\nConnectez-vous au portail RH via l\u2019intranet comme d\u2019habitude pour v\u00e9rifier vos choix. Des questions ? Contactez les RH au poste habituel.',w:['Domaine interne, ni lien ni pi\u00e8ce jointe.','Il vous renvoie vers le portail que vous utilisez d\u00e9j\u00e0.','Comparez avec le faux message RH pr\u00e9c\u00e9dent : c\u2019est le domaine qui fait la diff\u00e9rence.']},\n{c:'SMS',fn:'R\u00e9compenses ShopMart',s:'',b:'ShopMart : F\u00e9licitations ! Vous avez \u00e9t\u00e9 s\u00e9lectionn\u00e9 pour une carte cadeau de 500 $. R\u00e9pondez \u00e0 un sondage de 30 secondes pour la recevoir :',w:['Les prix inattendus sont des app\u00e2ts.','Domaine en .click sans rapport avec le magasin.','Le \u00ab sondage \u00bb se termine par une demande de carte bancaire pour les \u00ab frais d\u2019envoi \u00bb.']}\n];\nif(FR&&QF.length===Q.length){Q=Q.map(function(x,k){var f=QF[k],o={};for(var p in x)o[p]=x[p];for(var p2 in f)o[p2]=f[p2];return o})}\nvar POOL=Q;\nfunction pickSet(){var ph=shuffle(POOL.filter(function(x){return x.a==='phish'})).slice(0,7),lg=shuffle(POOL.filter(function(x){return x.a==='legit'})).slice(0,3);Q=shuffle(ph.concat(lg))}\npickSet();\nvar root=document.getElementById('m212pq'),i=0,score=0,done=false;\nvar $=function(id){return document.getElementById(id)};\nfunction esc(t){return String(t).replace(\/[&<>\"]\/g,function(c){return{'&':'&amp;','<':'&lt;','>':'&gt;','\"':'&quot;'}[c]})}\nfunction render(){\n var q=Q[i];done=false;\n $('pq-count').textContent=T.q+(i+1)+T.of+Q.length;\n $('pq-tally').textContent=T.sc+score;\n $('pq-bar').style.width=(i\/Q.length*100)+'%';\n var h='<div class=\"mail\"><div class=\"mh\"><span class=\"chan\">'+esc(q.c)+'<\/span><div class=\"row\"><span class=\"lbl\">'+T.from+'<\/span><span><b>'+esc(q.fn)+'<\/b> <span class=\"addr\">&lt;'+esc(q.fa)+'&gt;<\/span><\/span><\/div>';\n if(q.s)h+='<div class=\"subj\">'+esc(q.s)+'<\/div>';\n h+='<\/div><div class=\"mb\">'+esc(q.b);\n if(q.lt)h+='\\n\\n<span class=\"fake-link\" tabindex=\"0\" title=\"'+esc(q.lu)+'\" data-u=\"'+esc(q.lu)+'\">'+esc(q.lt)+'<\/span>';\n h+='<\/div>';\n if(q.att)h+='<div class=\"att\">&#128206; '+esc(q.att)+'<\/div>';\n h+='<\/div>';\n $('pq-mail').innerHTML=h;\n var fl=root.querySelector('.fake-link');\n if(fl){fl.addEventListener('click',function(){var p=fl.nextElementSibling;if(p&&p.classList.contains('lp'))return;var s=document.createElement('div');s.className='lp';s.style.cssText='margin-top:8px;font:13px ui-monospace,Menlo,monospace;background:#e9eef4;color:#1b2430;padding:6px 8px;border-radius:6px;word-break:break-all';s.textContent=T.lk+fl.getAttribute('data-u');fl.after(s);});}\n root.querySelectorAll('.choice').forEach(function(b){b.disabled=false;b.classList.remove('picked')});\n var fb=$('pq-fb');fb.className='fb';fb.innerHTML='';\n}\nfunction answer(a,btn){\n if(done)return;done=true;\n var q=Q[i],ok=a===q.a;if(ok)score++;\n root.querySelectorAll('.choice').forEach(function(b){b.disabled=true});btn.classList.add('picked');\n $('pq-tally').textContent=T.sc+score;\n var fb=$('pq-fb');fb.className='fb show '+(ok?'ok':'bad');\n fb.innerHTML='<h4>'+(ok?T.ok:T.ko)+T.is+(q.a==='phish'?'<span style=\"color:var(--red)\">'+T.ph+'<\/span>':'<span style=\"color:var(--green)\">'+T.lg+'<\/span>')+'.<\/h4><ul>'+q.w.map(function(x){return '<li>'+esc(x)+'<\/li>'}).join('')+'<\/ul><button type=\"button\" class=\"next\" id=\"pq-next\">'+(i<Q.length-1?T.nx:T.res)+'<\/button>';\n $('pq-next').addEventListener('click',next);$('pq-next').focus();\n}\nfunction next(){i++;if(i<Q.length){render();$('pq-quiz').scrollIntoView({behavior:'smooth',block:'start'})}else finish()}\nfunction finish(){\n $('pq-bar').style.width='100%';$('pq-quiz').style.display='none';\n var r=$('pq-result');r.classList.add('show');\n $('pq-score').innerHTML=score+'<small>\/'+Q.length+'<\/small>';\n var t,m,col;\n var R=score>=9?T.r9:score>=7?T.r7:score>=5?T.r5:T.r0;col=score>=9?'var(--green)':score>=7?'var(--cyan)':score>=5?'var(--amber)':'var(--red)';t=R[0];m=R[1];\n var el=$('pq-rating');el.textContent=t;el.style.color=col;$('pq-msg').textContent=m;\n r.scrollIntoView({behavior:'smooth',block:'start'});\n}\nroot.querySelectorAll('.choice').forEach(function(b){b.addEventListener('click',function(){answer(b.getAttribute('data-a'),b)})});\n$('pq-retry').addEventListener('click',function(){pickSet();i=0;score=0;$('pq-result').classList.remove('show');$('pq-quiz').style.display='';render();$('pq-quiz').scrollIntoView({behavior:'smooth'})});\n$('pq-share').addEventListener('click',function(){var u=location.origin+location.pathname,txt=T.sh(score,Q.length);if(navigator.share){navigator.share({title:T.st,text:txt,url:u}).catch(function(){})}else if(navigator.clipboard){navigator.clipboard.writeText(txt+' '+u).then(function(){$('pq-share').textContent=T.cp})}});\nrender();\n})();\n<\/script>\n\n\n\n\n<style>.m212guide{max-width:880px;margin:40px auto 10px;font-family:inherit;color:#c5d7e5;line-height:1.65;font-size:16px}.m212guide h2{color:#fff;font-size:26px;margin:34px 0 10px}.m212guide h3{color:#fff;font-size:18px;margin:20px 0 6px}.m212guide p{margin:0 0 12px}.m212guide ol,.m212guide ul{margin:0 0 14px;padding-left:22px}.m212guide li{margin:5px 0}.m212guide a{color:#3cc8f0}.m212guide .box{border:1px solid #1f3b4d;border-radius:14px;background:#0b1828;padding:18px 22px;margin:16px 0}.m212guide .warn{border-left:4px solid #ff5468}.m212guide details{border:1px solid #1f3b4d;border-radius:12px;background:#0b1828;padding:12px 16px;margin:10px 0}.m212guide summary{cursor:pointer;color:#fff;font-weight:700}.m212guide details p{margin:10px 0 2px}.m212guide .rel{display:flex;flex-wrap:wrap;gap:10px}.m212guide .rel a{border:1px solid #1f3b4d;border-radius:10px;padding:9px 14px;text-decoration:none;background:#0f2336;color:#e6edf3}<\/style><section class=\"m212guide\" id=\"guide\"><h2>How the phishing quiz works<\/h2><p>Each round shows ten realistic emails, texts or sign-in prompts, drawn at random from a pool of 30 scenarios: seven phishing attempts and three genuine messages. Decide whether each is phishing or legitimate. After every answer you see the warning signs a security analyst would notice. Play again for a new mix.<\/p><h2>The five checks that catch most phishing<\/h2><ol><li><b>Read the real domain<\/b> of the sender and of every link, from the right.<\/li><li><b>Distrust urgency<\/b>: deadlines, threats to close an account, and &ldquo;final notice&rdquo; wording.<\/li><li><b>Judge the request, not the sender name<\/b>: gift cards, payment changes, passwords and codes are red flags even from a familiar name.<\/li><li><b>Never enter a code or approve a prompt you didn&rsquo;t start<\/b>. Device-code phishing and MFA-fatigue attacks rely on exactly that.<\/li><li><b>Verify another way<\/b>: type the website yourself or call a number you already have.<\/li><\/ol><h2>Use it for team training<\/h2><p>Share the quiz link with colleagues or students, ask everyone to play two rounds, then discuss the questions people missed most. Because the scenarios use fictional brands and nothing is recorded, it&rsquo;s safe to use in any classroom or awareness session.<\/p><h2>Frequently asked questions<\/h2><details><summary>What is phishing?<\/summary><p>Phishing is a message designed to trick you into revealing information, paying money, approving access or opening malware. It can arrive by email, text message (smishing), phone call (vishing), QR code or chat app.<\/p><\/details><details><summary>What is device-code phishing?<\/summary><p>The attacker asks you to enter a short code on a genuine Microsoft or other sign-in page. Entering it signs the attacker&rsquo;s session in with your account, even though you completed real multi-factor authentication. Only enter device codes for something you started yourself, such as signing in on a TV.<\/p><\/details><details><summary>I clicked a phishing link. What should I do now?<\/summary><p>Don&rsquo;t enter anything else. If you typed a password, change it on the real site and enable two-factor authentication. If you approved a prompt or entered a code, sign out of all sessions and contact your IT team. Report the message to your email provider or security team.<\/p><\/details><details><summary>Are my quiz answers stored?<\/summary><p>No. The quiz runs entirely in your browser. Answers and scores are not sent or saved.<\/p><\/details><details><summary>Are the companies in the quiz real?<\/summary><p>No. All brands, people and addresses are fictional, so the quiz never imitates a real organisation.<\/p><\/details><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is phishing?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Phishing is a message designed to trick you into revealing information, paying money, approving access or opening malware. It can arrive by email, text message (smishing), phone call (vishing), QR code or chat app.\"}},{\"@type\":\"Question\",\"name\":\"What is device-code phishing?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The attacker asks you to enter a short code on a genuine Microsoft or other sign-in page. Entering it signs the attacker&rsquo;s session in with your account, even though you completed real multi-factor authentication. Only enter device codes for something you started yourself, such as signing in on a TV.\"}},{\"@type\":\"Question\",\"name\":\"I clicked a phishing link. What should I do now?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Don&rsquo;t enter anything else. If you typed a password, change it on the real site and enable two-factor authentication. If you approved a prompt or entered a code, sign out of all sessions and contact your IT team. Report the message to your email provider or security team.\"}},{\"@type\":\"Question\",\"name\":\"Are my quiz answers stored?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The quiz runs entirely in your browser. Answers and scores are not sent or saved.\"}},{\"@type\":\"Question\",\"name\":\"Are the companies in the quiz real?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. All brands, people and addresses are fictional, so the quiz never imitates a real organisation.\"}}]}<\/script><h2>Keep learning<\/h2><div class=\"rel\"><a href=\"\/tools\/link-checker\/\">Suspicious link checker<\/a><a href=\"\/tools\/email-header-analyzer\/\">Email header analyzer<\/a><a href=\"\/learn\/learning-paths\/#path-basics\">Security basics path<\/a><a href=\"\/skyw4lker-device-code-phishing-microsoft-365\/\">SkyW4lker device-code phishing explained<\/a><\/div><\/section>\n","protected":false},"excerpt":{"rendered":"<p>Free 10-question phishing test with realistic emails and texts. Learn the red flags security pros look for.<\/p>","protected":false},"author":1,"featured_media":0,"parent":3386,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3675","page","type-page","status-publish","hentry"],"_hostinger_reach_plugin_has_subscription_block":false,"_hostinger_reach_plugin_is_elementor":false,"_links":{"self":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/comments?post=3675"}],"version-history":[{"count":4,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3675\/revisions"}],"predecessor-version":[{"id":3720,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3675\/revisions\/3720"}],"up":[{"embeddable":true,"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/pages\/3386"}],"wp:attachment":[{"href":"https:\/\/cyber.mag212.com\/fr\/wp-json\/wp\/v2\/media?parent=3675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}