Cybersecurity - Phishing Attack

Phishing attack is one of social engineering technique where email is sent to a targeted person to get personal information. This information can then be used against you. Beaware of such email. This form of attack is specially used to gain credentials of banking websites.

What will happen is you'll receive an email with genuine looking link saying you might need to reset your passwords or something like that. Once you click on the link you'll be directed to special-made website that looks similar to your banking website. Now you will start to believe and will enter your password and try to change that. But what in real is happening is you are giving information to malicious attacker. Once you hit submit hacker will re-direct to your original banking website. Your password is already stolen and you don't even know that. Hacker can now login to your bank and transfer the money with your provided credentials.


Beware of such attacks. There are various ways you can be alert... Here I list down 10 of them

1. Don’t trust the display name of who the email is from
2. Look but don’t click
3. Check for spelling errors
4. Consider the salutation
5. Is the email asking for personal information?
6. Beware of urgency
7. Check the email signature
8. Be careful with attachments
9. Don’t believe everything you see
10. When in doubt, contact your technical person

Social Engineering Red Flags

Cybersecurity - Social Engineering Awareness

Social Engineering is a form of attack whereby a user is tricked by an adversary in giving sensitive information. For example you are on a plane and you decided to use your laptop. You open it and then enter your credentials. In most of the time you don't notice who is sitting around you and thinking of no-one is looking at you you enter your password. However, a person sitting behind you might be looking at what you've typed in. This is a form of social engineering attack known as Shoulder Surfing. There are many other similar forms of attack where you are unknowingly giving your information.

Be careful of what you do and always stay alert. Here are the tips regarding how you can safeguard yourself from Social Engineering Attack.

Whaling Attack

This is another form of Social Engineering technique. Also, a type of Phishing attack which is very targeted one. In this type of attack, what hacker does is finds "big fish" in an organization. "Big Fish" means high level personnel in an organization who if successfully attacked will result in huge gain.

Specifically crafted genuine looking phishing email is sent to that person from a person masqueraded as senior person of that organization. S/He will click on the link and otherwise provide personal information to the attacker unknowingly.

Vishing Attack

Vishing Attack is a type of social engineering attack. It is another form of Phishing Attack. You will fall victim to this attack by means of your telephone or VoIP.

What happens here is, attacker uses phone or other voice medium to extract from you. You don't think it is that simple? I'm sorry to inform you that you're mistaken. Have a look at this video and sense the gravity of the attack.

https://www.youtube.com/watch?v=BEHl2lAuWCk


Stay safe and stay informed

Beaware of Phishing Attack

Phishing attack is one of social engineering technique where email is sent to a targeted person to get personal information. This information can then be used against you. Beaware of such email. This form of attack is specially used to gain credentials of banking websites.

What will happen is you'll receive an email with genuine looking link saying you might need to reset your passwords or something like that. Once you click on the link you'll be directed to special-made website that looks similar to your banking website. Now you will start to believe and will enter your password and try to change that. But what in real is happening is you are giving information to malicious attacker. Once you hit submit hacker will re-direct to your original banking website. Your password is already stolen and you don't even know that. Hacker can now login to your bank and transfer the money with your provided credentials.

Beware of such attacks. There are various ways you can be alert... Here I list down 10 of them

1. Don’t trust the display name of who the email is from
2. Look but don’t click
3. Check for spelling errors
4. Consider the salutation
5. Is the email asking for personal information?
6. Beware of urgency
7. Check the email signature
8. Be careful with attachments
9. Don’t believe everything you see
10. When in doubt, contact your technical person