A familiar message. An unfamiliar request.

Phishing uses deceptive messages to persuade people to reveal information or take an unsafe action. A targeted message can borrow real details from public posts to feel personal and trustworthy. Knowing your employer, favorite café, or travel plans does not prove that a sender is who they claim to be.
Alex Jordan Rivera, a junior robotics technician at Northbridge Robotics, is preparing for MountainFest on October 10-15. On October 8, Alex finds three messages in their inbox. Your task is to investigate the request, connect it to publicly available clues, and decide how Alex should respond.
You are the investigator. Compare evidence before drawing a conclusion. A polished design, a familiar name, or HTTPS alone cannot establish that a request is legitimate.

Inbox
Public Sources
Company Directory
Captured Portal
Response Desk
CYBER.ORG Phishing Challenge • Copyright © 2026 Cyber Innovation Center • All Rights Reserved. Not for Distribution.