BotNet News

Your source for Online Security News

Phishing is a fraudulent scheme that uses email to obtain passwords, personal data, account information or credit card details. Once phishers have this information they can use it for different malicious purposes such as money withdrawal, blackmailing or committing further frauds.

Cybercriminals often spoof the website of a legitimate service to make their fake site look authentic. Therefore, when you click a link in an email be sure to pay attention to the URL and to the page that appears. If it looks different than expected, close the page immediately.

Another sign of a suspicious email is spelling or grammar mistakes. Most companies use professional copywriters or at least a spell checker to review official emails before sending them. Emails from colleagues or family members should also not contain spelling errors.

It is also a good idea to take a moment to assess the situation. Attackers rely on haste, so if an email asks for sensitive action, take the time to check with the sender via a different channel and verify that the request is in line with company policies.

It’s also important to educate employees on the basics of phishing. This includes educating them on the different types of phishing attacks, and how to recognize them. Additionally, it’s a great idea to teach employees on the importance of using multiple factor authentication when accessing accounts, which will help protect them from phishing and other forms of social engineering.