Be wary of phishing attacks

Every so often, headlines are dominated by one news event. If it's not COVID, it's the latest Elon Musk news, the Ukraine invasion or - most recently - the death of the Queen and subsequent announcement of a new King.

But, as hackers are always looking for new ways to exploit us, they may be turning to high-profile news stories as bait in phishing attacks.

As such, we saw it fit to offer a quick refresher on phishing - and how you can protect yourself out there.

What is phishing?

Phishing is a form of cybercrime in which hackers use emails or other electronic messages to trick people into divulging their personal or financial information. "Phishing" was created by combining the words "fishing" and "phishing." 

Originally the term was used to describe the practice of sending email messages designed to look like they were from a trustworthy source to lure someone into providing sensitive information. Now, it has come to be applied to any type of online scheme designed to steal personal information.

How can phishing attacks be dangerous?

Phishing scams can be used to steal people's money, identities or even their access to data. A successful phishing attack can result in stolen identity or account credentials that can be used for further fraud, identity theft or network infiltration. For this reason, you must take steps to protect yourself against these threats and stay alert to potential threats.

Phishing tactics have become increasingly complex over the years, so you must be aware of the latest techniques and tactics used by hackers - for those wanting to learn more, we post regular cyber security blogs here.

But, keeping on with phishing, here are four tips to keep in mind if you receive an unexpected email that appears to be from a business or financial institution: 

- Never open an email attachment unless you are certain it is legitimate 

- Do not respond to a suspicious email 

- Always log out of websites and apps with public Wi-Fi and never share sensitive information in a public location 

- Never provide sensitive personal information via email unless you initiated the contact 

You can help protect your account by taking some simple precautions, such as changing your password regularly and being careful when accessing your financial accounts online.

How to avoid falling victim to phishing attacks

As with anything cyber-related, you need to exercise extreme caution these days.

Some websites may appear authentic but are fakes and could contain malicious software that can infect your computer and steal your information. And just because a website looks authentic, don't assume it is. When in doubt, verify the authenticity of the site before you submit any information to it.

Equally, take care when filling out online forms, and never give out your personal or financial information through an email or an online form without first confirming that the form is genuine.

How do you protect yourself from phishing attacks? 

Be vigilant. 

That means only opening emails and attachments from people you know or companies you trust, not clicking on links embedded in those emails or opening files attached to those emails. 

It also means changing your passwords frequently and making sure you're aware of possible threats. 

Additionally, you should consider educating yourself and your employees about security threats and developing response procedures in case of a breach. And perhaps most importantly, it means staying in touch with your customers and being proactive in providing them with information about potential threats and ways to protect themselves.

The Last Word

Phishing attacks are amongst the most common threats out there. At the time of writing this, I've received three scam texts in the last three days that use a postage issue as bait. Others may get texts with COVID - or health-related lures - and all it takes is one lapse of judgement or errant click for a hacker to access potentially significant or sensitive information.

But you don't have to live in fear. Partnering with a cyber security specialist, such as Fifosys, ensures access to cutting-edge training that guarantees you and your staff can cope with threats out there - and know how to react in the worst-case scenario.

Get in contact with us today to find out more about how we can help.