Phishing: The Next Big Threat?
Mood:  a-ok
Now Playing: Far From Finished - East Side of Nowhere
Topic: Security

Phishing v. using social engineering techniques to acquire sensitive information, commonly done via e-mail and instant messaging.

According to statistics from January, more phishing attacks were made via e-mail than viruses and trojans. Why is this significant? Because it's never happened before. Maybe it was just a fluke, and virus-makers were just bored last month. But there is always the chance that it could be something more.

Either way, phishing is usually more detrimental than a virus because most phishers want credit card or banking information--something that could permanently damage a family's finances.

 Some phishing scams are easy to identify, such as the ones that ask you to send your account number and bank routing number to a "bank" (actually a group of people who want to rob you) that would like to deposit a large sum of money into your account that you are due by a recently deceased distant relative. Anything that sounds like that can be deleted, folks. If that were really what was going on, they would have a legal representative get in touch with you, and it probably wouldn't be by e-mail.

A popular phishing scam that is almost believable is to receive an e-mail letter from a "bank" outside of the country saying that your banking information was used in a different country and asks you to click a link or send a reply e-mail to provide them with your account information to validate the transactions.

People, do not do this. If your account information had really been used outside the country, your bank probably wouldn't care, and you'd notice on your next statement. Even if the bank did want to contact you, it wouldn't be by e-mail. More than likely, they'd send you a letter or phone you asking you to stop by the bank in person.

 More tips to avoid being scammed:

1. Look at the names on the e-mail. Do you recognized the company, bank, organization, etc. as one you have done business with before?
2. If asked to visit a website and submit account information, or send a reply e-mail with account information, try to obtain a phone number. If they give you one, call and tell them you'd like to schedule an office appointment to handle the issue.
3. Pay attention to the sender's e-mail address. If it doesn't seem professional (i.e. doesn't end with @businessname.com or something somewhat relative), then there's a good chance it's a phishing scam.
4. Most of them want banking and credit card information, but there are those who want passwords, social security numbers, and any other personal and important information they can get. Don't give out any of this information via e-mail. Call and make an appointment if you suspect it seems phishy.

One final note:

Remember, if you or someone you know has been duped by a phishing scam, keep as much information on it as possible. The sender's e-mail address, the websites or street addresses they may have asked you to use, and any names (real or false) they gave you can be helpful in tracking these guys.