Phishing Awareness | Security Awareness

Introduction

Phishing is a cyber attack that uses disguised email as a weapon. The goal is to trick the email recipient into believing that the message is something they want or need, such as a request from their bank or a note from someone in their company.

What is Phishing?

Phishing is a form of cybercrime in which attackers impersonate legitimate organizations or individuals to steal sensitive information such as usernames, passwords, and credit card numbers. Phishing attacks can occur through various channels, including email, social media, SMS, and websites.

Note: Always verify the authenticity of the request before providing personal information.

How Phishing Works

Phishing typically involves the following steps:


                Attackers create a fraudulent email or message.
                The message contains a link to a fake website that looks like a legitimate site.
                Users are tricked into clicking the link and entering their credentials.
                Attackers capture the entered credentials for malicious purposes.

Tip: Always hover over links to see the actual URL before clicking.

Identifying Phishing Attempts

Here are key indicators of phishing attempts:

Unusual sender email addresses.
Generic greetings (e.g., "Dear Customer").
Urgent language prompting immediate action.
Links that do not match the legitimate website URLs.
Attachments that are unexpected or suspicious.

Best Practices

To keep yourself safe from phishing attacks:

Always verify the source of any communication.
Keep your software and security systems updated.
Use multi-factor authentication wherever possible.
Educate yourself and others about phishing tactics.
Report phishing attempts to your IT department or email provider.

FAQ

What should I do if I fall for a phishing attack?

Immediately change your passwords, enable two-factor authentication, and monitor your accounts for unauthorized activities.

Can phishing happen through social media?

Yes, phishing can occur on social media through fake profiles and messages. Always verify the identity of the person contacting you.

Is it safe to click on links in emails from known contacts?

Always verify with the contact through a different channel before clicking on links, as their accounts may have been compromised.

Flowchart of Phishing Awareness


graph TD;
    A[Start] --> B[Receive Email];
    B --> C{Is the email from a known sender?};
    C -->|Yes| D[Check for suspicious content];
    C -->|No| E[Do not click links or download attachments];
    D --> F{Is the content suspicious?};
    F -->|Yes| E;
    F -->|No| G[Proceed with caution];
    G --> H[Verify with sender];
    H --> I{Is the verification successful?};
    I -->|Yes| J[Safe to proceed];
    I -->|No| E;
    E --> K[Report the phishing attempt];
    K --> L[End];