According to Guthrie County Information Technologies Administrator Brian Hoffman, there have been some phishing attacks in the county recently.

Hoffman says that the attacking entity used an email account of someone that county employees regularly correspond with, and produced a well crafted email to try and get login information from those receiving the emails. He explains that even though the emails have had the Guthrie County graphic and a background image of the old courthouse that the county uses with their Microsoft Office 365 page, the true way to verify that the page is legit is to check the URL.

Hoffman makes it clear that unless the URL has https://login.microsoftonline.com in it throughout the process, it should not be trusted. Images provided by Hoffman showing how to tell the difference between the phishing website and the correct one can be found below. He adds that when these emails are found, immediately report them, so that they can be investigated.