What is the meaning of phishing?
Phishing is a type of social engineering where the attacker steals confidential data. This includes login credentials, card details, or passwords. Phishing happens over electronic means like emails or text messages that originate from unreliable sources.
There are different types of phishing ranging from classic email phishing to inventive phishing like smishing, spear phishing and more. Read to know more about the various types of phishing in cyber security.
Types of phishing attacks
Read below the different types and common techniques used for phishing attacks:
Smishing
Text messages containing malicious links that appear to have originated from trustworthy companies asking users to give out confidential information.
Vishing
Phone calls make users divulge their confidential details to fraudsters pretending to be from reliable organisations by using VoIP (Voice over Internet Protocol).
Pharming
Modifies IP addresses and redirects users to false websites designed to look like the original iterations. The fraudsters gain access to the users' data when they enter their usernames and passwords on these fraudulent websites.
Loyalty frauds
Fraudsters can hack into loyalty members’ accounts and spend the accumulated loyalty points while gaining access to their personal information.
Session hijacking
Common in bank transactions, these phishing attacks are done by gaining unauthorised access to a system, thus effectively hijacking the computer session.
Content spoofing
Modifying parts of the content on a website that, when clicked, redirects users to malicious websites and gains their confidential data.
Whaling
Phishing scams targeting high-profile or senior executives, such as CEOs, CFOs, COOs, CIOs, etc.
Why is phishing a problem?
To acquire direct access to email, social media, and other accounts, cybercriminals utilise phishing assaults. This information is sensitive and access to it can cause major financial or identity theft.
The fraudsters can use it to get personal information illegally, which may further lead to confidential losses. Attackers gain access to connected systems, modify them, and compromise them.
How phishing works
Phishing basically works by sending messages or emails containing fake websites that look like legitimate company or organisation websites. On clicking the link, the user shares personal details like the credit card number. In doing so, the attacker will steal the information and misuse the credit card in fraudulent acts.
How to identify a phishing email?
Here are a few ways to identify a phishing email:
Contains too-good-to-be-true offers.
Recipients in CC whom you do not recognise.
Suspicious attachments or links.
Has spelling or grammatical errors.
What happens when you reply or click on a phishing email?
Opening or clicking a phishing email may lead you to malicious websites. These can gain access to your confidential data like bank or card details, login credentials, and more.
