--- title: "When the Department of Homeland Security isn’t so Secure | Phish Protection" description: "When the Department of Homeland Security isn’t so Secure: From its website , the Department of Homeland Security" image: "https://phishprotection.com/og/blog/when-the-department-of-homeland-security-isnt-so-secure.png" canonical: "https://phishprotection.com/blog/when-the-department-of-homeland-security-isnt-so-secure/" --- Quick Answer From its website , the Department of Homeland Security's (DHS) mission is "to secure the nation from the many threats we face." In essence, the DHS's job is to create trust, for Americans, in their own security. So, it shouldn't come as any surprise that hackers would try to exploit that trust by launching an email phishing scam that impersonates. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fwhen-the-department-of-homeland-security-isnt-so-secure%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=When%20the%20Department%20of%20Homeland%20Security%20isn%26%238217%3Bt%20so%20Secure&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fwhen-the-department-of-homeland-security-isnt-so-secure%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fwhen-the-department-of-homeland-security-isnt-so-secure%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fwhen-the-department-of-homeland-security-isnt-so-secure%2F&title=When%20the%20Department%20of%20Homeland%20Security%20isn%26%238217%3Bt%20so%20Secure "Share on Reddit") [ ](mailto:?subject=When%20the%20Department%20of%20Homeland%20Security%20isn%26%238217%3Bt%20so%20Secure&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fwhen-the-department-of-homeland-security-isnt-so-secure%2F "Share via Email") ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/07/phishing-attack-prevention-2211.jpg) From its[website](https://www.dhs.gov/about-dhs), the Department of Homeland Security’s (DHS) mission is “to secure the nation from the many threats we face.” In essence, the DHS’s job is to create trust, for Americans, in their own security. So, it shouldn’t come as any surprise that _hackers would try to exploit that trust by launching an email **phishing scam** that impersonates email alerts from the DHS_. According to the[Cybersecurity and Infrastructure Security Agency](https://www.us-cert.gov/ncas/current-activity/2019/06/18/DHS-Email-Phishing-Scam)(CISA), whose parent is the DHS, “The email campaign uses a spoofed email address to appear like a National Cyber Awareness System (NCAS) alert and lure targeted recipients into downloading malware through a malicious attachment.” ![Phishing attack prevention](https://media.mailhop.org/phishprotection/images/2019/07/phishing-attack-prevention-2211.jpg) Hackers have a pretty simple playbook. Figure out what people trust and exploit that trust to launch an attack. _Phishing attacks aren’t about technology, they’re about trust exploitation_. So, in that regard, the DHS **phishing attack** is no different from any other phishing attack. So, how do you protect yourself from **phishing email** masquerading as a DHS alert? The same way you protect yourself from all **email-based phishing attacks**. With technology that isn’t easily tricked by spoofed email addresses and fake websites. With our cloud-based [email threat protection](/) that includes real-time link scanning and smart quarantine to protect against display name spoofing, domain name spoofing and malicious attachments. ![Phishing prevention tips](https://media.mailhop.org/phishprotection/images/2019/07/phishing-prevention-tips-3974.jpg) Phish Protection protects against spear phishing , ransomware , CEO fraud , impersonation , and other sophisticated email attacks with[advanced threat defense](/products/advanced-threat-defense/). It integrates seamlessly with Office 365, on-premise email solutions and cloud-hosted email solutions. It also works with any device including Mac, Windows, iOS, Android or Linux. Over 1,000 satisfied customers. No contracts. Full price transparency. ## Topics [ Phishing ](/tags/phishing/) ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 4m 13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[ Foundational 4m All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[ Foundational 4m 2021 Phishing Trends You Need To Be Wary Of Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"When the Department of Homeland Security isn’t so Secure","description":"When the Department of Homeland Security isn’t so Secure: From its website , the Department of Homeland Security's DHS mission is \"to secure the nation.","url":"https://phishprotection.com/blog/when-the-department-of-homeland-security-isnt-so-secure/","datePublished":"2019-07-10T07:05:09.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-07-10T07:05:09.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/when-the-department-of-homeland-security-isnt-so-secure/"},"articleSection":"foundational","keywords":"Phishing","wordCount":300,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/07/phishing-attack-prevention-2211.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"When the Department of Homeland Security isn’t so Secure","item":"https://phishprotection.com/blog/when-the-department-of-homeland-security-isnt-so-secure/"}]} ```