Data & Security · Free course
Spotting and Reporting Phishing on Mac
A practical course for anyone who works on a Mac. Learn how phishing reaches Mac users today, how to spot it, and exactly what to do if you've clicked a link, run something or typed your password.
- Modules
- 5
- Time
- 55 min
- Level
- Beginner
- Cost
- Free
What you'll learn.
- Why attackers target Mac users, and why Gatekeeper and XProtect can't stop phishing on their own
- How to recognise fake calendar invites, fake macOS password prompts, launch scams and requests for logins
- How ClickFix tricks people into running an attacker's code, and the one rule that stops every version
- What to do straight away if you've clicked a link, run something or typed your password
- What IT does in the first hour after a report, and when the 72-hour ICO deadline applies
Who it's for.
Anyone who works on a Mac, in any role. It's written for staff at Mac-first businesses who want to know what to look out for and what to do, and it's also useful for managers who want to check their team has the right reporting process in place.
Course outline.
- Module 1: Why Attackers Target Mac Users
- Module 2: What Phishing Looks Like on a Mac
- Module 3: ClickFix and Fake Fix Instructions
- Module 4: Spot It, Report It
- Module 5: What Happens After a Report
Learn. Quiz. Earn a badge.
Short modules, a quick quiz after each one, and a badge when you finish the track. Pick up where you left off.
Start track →Is this course free?
Yes. Public courses in the Dr Logic Academy are free. You just need an Academy account to save your progress.
How long does it take?
About 55 minutes, across 5 short modules. Go at your own pace and pick up where you left off.
How does it work?
Each module ends with a short quiz. Pass them all to complete the track.
Do I earn a badge?
Yes. You earn a badge when you complete the track, and it shows on your Academy profile.
Do I need to be technical to do this course?
No. The course explains everything in plain language. It covers Terminal and Script Editor because attackers use them, but you don't need to have opened either.
Does it cover UK rules on reporting breaches?
Yes. It explains when a phishing report becomes an incident and why UK GDPR's 72-hour deadline for reporting notifiable breaches to the ICO starts earlier than most people expect.
Will it show me how to set up macOS 27 app control?
No. It explains what macOS 27's app and command-line control does and why it matters for ClickFix. Setting it up is a job for IT, through device management.
Is it only relevant to Macs?
The attacks covered are aimed at Mac users, but the reporting steps and the advice on stolen logins apply whatever device you use.
