How to Protect Yourself From Phishing
Phishing is a form of cyber crime in which criminals trick victims into sharing confidential information, usually by using fake messages to steal credentials and login details. This information is then used for unauthorized money withdrawal, blackmailing and committing other frauds.
A phishing attack starts with an email that looks legitimate and lures a victim into clicking on malicious links or attachments. These links can redirect to websites that request confidential information or download malware onto a victim’s device. These emails are sometimes even disguised to appear as if they come from trusted contacts. The message may include a sense of urgency, such as requiring the victim to take immediate action or a warning that their account is at risk.
Often, phishers are able to use data about their targets from online sources including social media and search engines. The attackers can also use software to scan the victim’s computer for vulnerabilities that can be exploited. This includes buffer overflow attacks and zero-day software vulnerabilities (which are flaws that have not yet been patched).
A phishing attack can be as simple as a fraudulent email, or as sophisticated as targeted “spear phishing” or impersonation. As a general rule, it is always safest to assume any unsolicited communication from unfamiliar sources is suspicious, especially if it requires the submission of confidential information or the click of a link. If you suspect a suspicious email, try hovering over the link without clicking to reveal its true destination.