Urgent Notice: Protect Yourself Against Cybersecurity Fraud

Our valued Vendor, we want to make you aware of current critical security threat. Cybercriminals are actively trying to trick suppliers into giving them money or sensitive information. It's more important than ever to be vigilant.

Please be aware of these warning signs of a potential cyberattack:

• Unexpected or unusual requests, especially those demanding immediate action.
• Suspicious links or attachments in emails.
• Requests for passwords or other credentials.
• Emails with a suspicious sender address, poor grammar, or spelling.
• Requests to make payments to personal bank accounts. Official OQ policy is that we will NEVER ask you to make payments to an employee's personal account.

How to Protect Your Organization

• Stop, look, and think before taking any action. One moment of caution can prevent a major security breach.
• Do not click suspicious links. Instead, manually type the official website address into your browser.
• Carefully review sender email addresses. Cybercriminals often add extra characters to make a fake address look legitimate.
• Understand that cybercriminals can use information from social media to make their messages seem more trustworthy.

Official OQ Communications

To ensure you are communicating with OQ, please remember these key points:

Official emails will only come from these domains:

• @oq.com
• @oqep.om
• @oqgn.om
• @oqbi.om
• @oq8.om
• @ottco.om
• @marafiq.om

Vendor registration is always free. We do not charge any fees for registration in our Tawreed portal.

All tender-related clarifications should be communicated through the Tawreed system's messaging tool or a valid OQ employee email address (ending with @oq.com).

By taking these simple steps, you can help keep your organization safe. Cybersecurity is a shared responsibility, and your awareness is our best defense

OQ accepts no liability for losses arising from communications, transactions, or interactions conducted outside official OQ-authorized channels.