How to Protect Against Phishing
Phishing is an attempt by criminals to trick people into divulging sensitive information such as passwords and PINs. This data can then be used to steal identities, make unauthorized purchases or apply for credit cards. Phishing is a popular attack vector and is often a component of larger security breaches, especially when attackers target large corporations.
Criminals can leverage modern technology to deliver phishing attacks via email, SMS text messages (called smishing), and even phone calls (called vishing). This attack vector works because fraudsters can disguise their malicious requests as legitimate shipping notices, account verification prompts or urgent security threats that appear as though they’re coming from a trusted source.
Effective technical defenses like anti-phishing software, secure gateways and email filtering can limit phishing attacks. However, human users are the weakest link in cybersecurity and training employees to recognize phishing tactics is essential. This includes establishing a culture of skepticism and encouraging best practices like verifying requests for sensitive information. Regular simulated educational phishing campaigns are also important for organizations to reinforce this education.
To help protect against phishing, be sure to hover over links on desktop or use the mousewheel to inspect the full URL before clicking. Additionally, don’t click on links in SMS or direct messaging apps. These types of messages are typically rushed and require immediate action. In addition, if a message appears to be rushed or does not follow normal process, treat it as suspicious until verified.