Tech Tip Tuesday is written and made possible by Computek who has been providing Georgetown and Austin businesses with fast, reliable and secure IT support and services since 2001. Learn more about Computek on their website, Facebook page or Instagram profile.
Phishing attacks are more widespread than ever, especially since the pandemic started. Chances are you have probably noticed an increase in spam emails in the last few years. While some phishing attempts are easy to recognize, others can fool almost anyone.
The first step to protecting yourself from cyber-attacks via phishing is to recognize what phishing is and learn the different types of phishing. The more you know, the easier it will be to keep your information safe from would-be hackers.
Let’s dive into what phishing is and how it works.
What is Phishing?
Phishing can come in the form of fraudulent emails, phone calls, and websites. Hackers will try to steal your passwords, banking information, and personal data by using tactics to trick you into giving them what they want. With this information, the hacker can gain access to your finances, contacts lists, and accounts connected to the attempt.
So, how do you stop phishing attempts? While there is no way to stop phishing completely, knowing how hackers use phishing can keep you from getting hacked. Let’s check out some of the different types of phishing.
What are the Different Types of Phishing?
Below are the top 5 ways hackers use phishing. Increasing your awareness of these main types will help keep you and your data safe and secure.
Email Phishing
Email phishing is one of the most common types of phishing. The hacker can either send an email that appears to be from someone you know or from a large company to trick you into trusting them. They can also intercept emails from people you trust and reply to your conversation to fool you into changing wiring information or giving out routing numbers.
Vishing
Vishing or voice phishing is phishing via phone calls. Sometimes the hacker will pretend to be the IRS, a banking institution, or even a friend of yours to try and get access to passwords, financial accounts, and more.
Social Engineering
Social engineering is one of the most difficult types of phishing to detect. This kind of hacking can take place over several months of gaining your trust or masquerading as someone you already know. They can use fake emails to pose as your boss, your family, or trustworthy companies to trick you into giving out the information they want.
Website Spoofing
Website spoofing or domain spoofing happens when a hacker mimics a well-known website such as LinkedIn or Chase Banking and steals your login information when you enter it on the fraudulent site. Sometimes the hackers pay to have their website show up first on Google so unsuspecting parties will click on the first search result without knowing it’s fraudulent.
Smishing
Smishing or SMS phishing is phishing via text message. You may have received messages thanking you for your purchase and to click the link to view the receipt or to check your recent cell phone bill from AT&T. When you click on the link, software will be downloaded to your device and gain access to all your personal data including any apps you use.
How to Avoid Falling for Phishing
Phishing itself is unavoidable but recognizing phishing attempts can keep you from falling victim to it. The following tips can help you learn to recognize phishing, but above all, trust your gut instincts. If something doesn’t feel right, don’t do it.
Hover Over the Email Address
If you receive an email that seems strange or even one that doesn’t, it never hurts to use your mouse and hover over the address. A small box will pop up next to your mouse and show you what the email address looks like. While the name might say it’s from someone you know or a company you trust, you might find the email address is complete gibberish or a just letter or two off from the friend or company’s real email.
Verbally Confirm Financial Transactions
If you are managing financial information or transactions via email, always call the person you’re working with. It might feel like a hassle, but it can save you from losing thousands of dollars to a hacker. Double checking the email is really from them, confirming account numbers, and making sure you have their correct email is crucial to secure email transactions.
Always Go Directly to the Website
If you receive an email asking you to go to a website and enter your information or saying there is a problem with your account, don’t click it. This is a common way to steal passwords and information. If it looks like it’s from your bank, call your bank. If it looks like it’s from Amazon, check your account by typing “Amazon . com” into your web browser. Be wary of all links and phone numbers listed on emails like this.
Never Click the First Link on Google
As mentioned before, hackers will pay to be the first link on Google. If you’re looking for “how to renew my driver’s license online” you could end up at a fake government website and give your credit card information directly to a hacker. Always stay away from links on Google that say “ad” next to them because that means they paid to be there, and they could be fraudulent.
Look for Spelling and Grammar Errors
If you receive an email that looks like it is from friend or trusted company, but it reads awkwardly or has spelling and grammar errors, that is a huge red flag. Contact the person or company the email is supposedly from via phone call, but remember, never use the phone number listed on the email. If it is a hacker, you might be calling a fraudulent line.
Don’t Click on External Links
As always, don’t click external links within an email, social media message, or text unless you know for sure it’s safe. External links can download viruses, install spyware, and ransomware, as well as give hackers access to all your accounts, camera, and microphone. Be very careful with external links because clicking on a phishing link can turn your whole life upside down.
The Bottom Line
When it comes to phishing, there are many ways to avoid getting fooled. Trusting your instincts and following the tips above can keep your personal data secure and save you the hassle of dealing with a hacker. For businesses, investing in high-quality cybersecurity, employee training, and protection software can all help keep your data (and customer’s data) safe and secure. For more information on protecting your businesses digital assets, contact your local managed IT company.
Until next time, stay secure out there!
Have a question you’d like addressed in the web series? Send it to us in our reader response form by clicking here.
Comments