These days, it\u2019s more important than ever to protect your personal information and that of your organization or business. Unfortunately, scammers can sometimes be so convincing that victims hand over confidential data on a silver platter, thinking that they\u2019re sharing it with someone trustworthy.<\/p>\n
Phishing is a very common type of cybercrime that you may have encountered before. It\u2019s important to raise awareness about this type of scam so that people are better equipped to recognize it and protect themselves.<\/p>\n
In this article, our\u00a0IT infrastructure management<\/a> specialists explain what phishing is and how to avoid taking the bait!<\/p>\n Phishing is a fraud technique used by cybercriminals who want to access a person or organization\u2019s confidential information and profit from it (identity theft, account opening, credit card use and other fraudulent acts). This practice is considered a cybercrime and usually involves the use of fake emails, websites or text messages.<\/p>\n Cybercriminals hide behind emails and websites that are familiar to victims in order to get them to divulge private information (address, date of birth, social insurance number, credit card information, PIN, etc.).<\/p>\n This is the most common type of phishing. Cybercriminals send an email to multiple recipients asking them to update their personal information, verify account details or change their password.<\/p>\n Many scammers have become masters at recreating the aesthetics of emails from credible institutions and instilling a sense of urgency in recipients.<\/p>\n Hackers are able to create fake websites that look so similar to the ones they are replicating that some victims will take the bait and enter their personal information, exposing themselves to identity theft.<\/p>\n Content spoofing, also known as content injection, consists of adding malicious content to a trusted website (financial institution, email account, etc.). The added content contains a link that directs the victim to an external website where they are asked to provide confidential information.<\/p>\n Phishing can also take place on mobile devices. In this type of fraud, scammers send a text or voice message stating that an account belonging to the victim is closed, corrupted or expired. They hope that the recipient will then click on the link that accompanies the message, directing them to a page, video or message that allows the scammer to steal personal information or install malware on the mobile device.<\/p>\n Voice phishing, or vishing, is a scam conducted over the phone. The scammer assumes the role of an insistent caller and leaves a message or reads a script that prompts the victim to call another phone number.<\/p>\n These fraudulent calls are designed to instill a sense of urgency or greed and incite the recipient to act quickly. For example, the scammer may tell the victim to provide certain information in order to prevent their bank account from being suspended or avoid being charged with a criminal offence.<\/p>\n Spear phishing<\/a> is a type of phishing used by cybercriminals who primarily target corporate users. Spear phishing is an attack that targets a specific recipient or small group using detailed, personalized information designed to trick them.<\/p>\n When recipients click on an attachment to a scam email, they may inadvertently install malware that then scours their computer and network for useful information.<\/p>\n The most popular types of malware include keyloggers (which will record passwords when they are typed in) and \u201cTrojan horse\u201d software. Note that hackers also sometimes hide viruses in fake updates<\/a>.<\/p>\n Cybercriminals can create online ads and pop-ups that trick people into clicking on a link that automatically installs malware.<\/p>\n —–<\/p>\n Book an appointment with us<\/strong><\/p>\nWhat is phishing?<\/h2>\n
Types of phishing<\/h3>\n
Email<\/h4>\n
Fake websites<\/h4>\n
Content spoofing<\/h4>\n
Phishing on mobile devices<\/h4>\n
Voice phishing<\/h4>\n
Spear phishing<\/h4>\n
Malware<\/h4>\n
Malvertising<\/h4>\n