There isn’t a person in this country who has not experienced some form of phishing at one time or another. Fraudulent attempts to obtain personal data such as passwords and credit card numbers have hit everyone who spends time on their computer, tablet or cell phone. The cybercriminals know that by disguising themselves as a trustworthy associate they can enter into an electronic communiqué that makes their target vulnerable. Social engineering makes many types of cyberattacks possible – phishing is one of the most prominent and common forms.
Social engineering is basically hackers who search to find a weakness by using human psychology and a variety of media, in an attempt to slide in unrecognized. When the target is not suspecting malicious activity, they are tricked into exposing sensitive data that will be used to replicate the identity. When one piece of personal data is revealed, it can open an entire personal platform that includes credit card numbers, passwords, and banking information. The information is then used for unauthorized purchases, withdrawals, and more. When you’re a victim of a socially engineered phishing scam, it can take months to resolve.
What to Watch Out For
At this point, most people are savvy enough to know when they are being targeted. But some phishing attempts are so professional, they are difficult to detect.
Beware of social engineering that:
- Uses link shorteners, like bit.ly, which is intended to fool the recipient into thinking the URL is from the company that is being supposedly represented
- Embeds links in an email to redirect the user to a suspicious site, even though the site looks authentic
- Creates urgency and fear in an effort to push the user into acting quickly
- Asks for any personal information, such as an address or password
- Isn’t personalized – does not use your name, but instead, “Dear Customer”
- Has grammatical or spelling errors
It’s all about Psychology and Curiosity
These cybercriminals are slick and know exactly how to peak their target’s interest in using their best social skills. They are also chameleons and can pose as someone trusted, such as a bank representative or doctor’s office. In most cases, they even have proper credentials, gained through social engineering, to completely fool their victims. Luckily, people share information on the internet regarding these attacks, which eventually puts an end to that particular “scenario”. However, there is a constant flow of phishing scenarios, which makes it difficult, if not impossible, for the masses to keep up.
A few of the latest 2019 phishing scams:
- Click here to get your refund
- Your loan is approved, call…
- Your payment is late again, so we closed your account.
- This account is suspended – click here to contact customer support.
How to Avoid Phishing Traps
If you’ve been a victim of social engineering or phishing scams, your awareness is probably heightened and calls or emails that cross your path are more scrutinized than in the past. If you have not yet experienced this frustrating cybercrime, we recommend that you follow these guidelines:
- Never provide personal or financial information via email or phone call.
- Never follow an embedded link. Instead, enter the company’s URL and go direct.
- Regularly change your passwords, particularly those used for anything related to your finances.
- Check your bank and credit card transactions weekly to ensure there are no charges that were not authorized.
- Review your credit reports with Equifax Canada or TransUnion Canada.
- Install security software and a firewall that will protect your computer and cell phone against viruses and outside attacks.
- Use multi-step verification by using more than one credential to log into your accounts.
MicroAge NWD
Our team of skilled IT pros can help prevent phishing scams within your organization. If you don’t already have a robust security system in place, we recommend a security audit to learn how weak IT areas can be strengthened.
We also offer complete IT managed services, IT Staffing, and Consulting – to name but a few of our specialties. We want you to rest easy knowing your company’s information technology is in expert hands. As such, we welcome you to join us for a free consultation, so we can understand the ins and outs of your company’s IT situation. Call 1-866-427-6243 or click here!
3 Components of an Effective Data Recovery Plan
You’ve probably got a data recovery plan in place; most companies do. However, do you enforce that plan so that it can actually deliver,…
How to Counter Internal Cybersecurity Risks
If you ask people about cybersecurity, they will probably start talking about hackers breaking into a company’s computers from hundreds of miles away. However,…
How to keep your files safe from CryptoJoker
A new form of ransomware called CryptoJoker was discovered in January 2016. It uses the AES-256 algorithm to encrypt victims’ files and then demands a…
5 Ways a Managed Services Provider Can Make Your Life Easier
Managed services providers (MSPs) are lifesavers for business owners and executives to manage their IT equipment and services. Among many other things, MSPs update software,…
3 IT Areas Where Your Business Might Need Help
Outsourcing operations to IT service providers is common among small and midsize businesses (SMBs), according to a CompTIA survey. More than 70 percent of the 500…