#  Cyber Security Awareness Month - Phishing Derby 

 



##  Welcome to our Cybersecurity Awareness Month Phishing Derby! 

 

 

       ![goldfish and a hook](/sites/g/files/omnuum12036/files/styles/hwp_21_9__1920x825/public/2025-09/phish%20derby.jpeg?itok=XrhIYy8p) 

 

 



 

 



 

##  Join the October Phishing Derby! 

Opt in below to take part in our Phishing Derby, where you'll receive four simulated phishing emails throughout October. Sponsored by Information Security and Data Privacy in celebration of Cybersecurity Awareness Month, this challenge is a fun way to sharpen your phishing detection skills!

**THE RULES:** 1. You must sign up to participate 2. You must report all four simulations correctly within three days of the email arriving in your inbox. 3. Don't ruin the game for others - when you find one of the simulations - keep it to yourself (and report it). 4. If you click on a link in one of the phishing emails, you can still be entered to win as long as you report it.

**HOW TO REPORT:** All four messages should be reported to <phishing@harvard.edu> by forwarding the email **or** by using the 'Report' button in Outlook. The simulated phish in this contest will be more challenging than what you see in the monthly simulations, but we will never impersonate someone from the university.

**HOW TO WIN:** One winner will be selected from the group of people who report all four emails, however, you will be on the list as someone who successfully completed the derby. The list will be shared on Slack!

**ENROLLMENT ENDED ON SEPTEMBER 30**



 

##  Did You Catch and Report? 

 



  [### Week One

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk1.jpg?csf=1&web=1&e=6zNsUT)Delivered to 140 people and reported by 116!

Keep up the great job!



 

   ![fish hooks and password written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk1.jpeg?itok=6-3Dth_k) 

 

 

 

  [### Week Two

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk2.jpg?csf=1&web=1&e=ZHe9ll)Delivered to 140 people and reported by 132!

Great job reporting!



 

   ![fish hook with do not click written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk2.jpeg?itok=tQGfmBjF) 

 

 

 

  [### Week Three

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk3.jpg?csf=1&web=1&e=4rhKbP)Delivered to 140 people and reported by 135!

Fantastic reporting!



 

   ![fish hook with username written on paper](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk3.jpeg?itok=7AIvapzR) 

 

 

 

  [### Week Four

 ](https://hu.sharepoint.com/:i:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/Derby_Wk4.jpg?csf=1&web=1&e=pJ0Or5)Delivered to 140 people and reported by 133!

Great job to all who participated and reported!



 

   ![envelope with fish hook displayed on mobile device](/sites/g/files/omnuum12036/files/styles/hwp_16_9__480x270/public/2025-09/derbywk4.jpeg?itok=iWCRawmB) 

 

 

 

  

 

 

 

##  Additional Resources 

[Cybersecurity Awareness Month page](https://privsec.harvard.edu/cyber-security-awareness-month)

[PrivSec Awareness &amp; Education page](https://privsec.harvard.edu/awareness-and-education)

[Best Practices Resource Hub](https://privsec.harvard.edu/best-practices)