What is phishing?
Phishing is an illegal attempt to mislead consumers into providing personal or financial information, including account numbers, passwords, etc..., via email or through fraudulent websites trying to imitate legitimate ones. The most common phishing 'attacks' occur through email disguised to appear as though it came from a reputable website/company/financial institution.
Most phishing attempts urge you to update/validate your account information, typically through a link in an email directing you to a fake website that appears to be legimate. Today, there are many phishing attacks that we all receive in emails. Some of the common lines or lures are:
- An email contains an "urgent" or "shocking" type message, requesting you to take immediate action on a matter relating to your account. Phishers often succeed by taking advantage of our human nature to 'act quickly without thinking'.
- A popup window claiming to be from a legitimate website, requesting personal infornation. Popup windows are not secure and you should never enter any personal information into one, unless you can see the secure padlock in the bottom bar of your browser.
- Email attachments: unless you know the sender of any email containing an attachment - DO NOT OPEN IT. Unsolicited mail is continuing to increase and is more often than not likely to contain a virus or a trojan unless you know its source and are expecting it.
|