How to Protect Yourself From Phishing Attacks
Phishing is an attack on a computer user where attackers gain access to personal information through fraudulent emails or text messages. Attackers use phishing to steal credentials, access financial accounts and to install malware on targeted devices that will ultimately be used to commit fraud. Attacks can be triggered by email, instant messaging or even through voice (vishing).
Cybercriminals often try to impersonate well-known companies in their phishing emails. They also use brand logos and marketing tactics to make their attacks appear more genuine. This is especially effective if the target regularly interacts with a particular business, such as banks, online retailers or the makers of popular apps.
Many phishing emails contain links that lead to fake websites or download malicious content on the victim’s device. Be cautious with any email that requests you to click a link or enter information over the phone or through a pop-up window, especially if it suggests dire consequences like your account will be deactivated. Instead, open and read the email from your device’s browser or copy the link address and hover over it to inspect the real website address.
Attackers often create a sense of urgency to get you to act without thinking, such as telling you that an important account is going to be deactivated if you don’t respond immediately. This is called fear-based phishing. You can prevent this from happening to you by being aware of the tactics that attackers use and by taking steps to educate yourself on how to identify phishing.