What is Phishing?

Phishing is one type of cyber attack. Phishing got its name from “phish” meaning fish. It’s a common phenomenon to put bait for the fish to get trapped. Similarly, phishing works. It is an unethical way to dupe the user or victim to click on harmful sites. The attacker crafts the harmful site in such a way that the victim feels it to be an authentic site, thus falling prey to it. The most common mode of phishing is by sending spam emails that appear to be authentic and thus, taking away all credentials from the victim. The main motive of the attacker behind phishing is to gain confidential information like

• Password

• Credit card details

• Social security numbers

• Date of birth

The attacker uses this information to further target the user and impersonate the user and cause data theft. The most common type of phishing attack happens through email. Phishing victims are tricked into revealing information that they think should be kept private. The original logo of the email is used to make the user believe that it is indeed the original email. But if we carefully look into the details, we will find that the URL or web address is not authentic. Let’s understand this concept with the help of an example:

Phishing

In this example, most people believe it’s YouTube just by looking at the red icon. So, thinking of YouTube as a secure platform, the users click on the extension without being suspicious about it. But if we look carefully, we can see the URL is supertube.com and not youtube.com. Secondly, YouTube never asks to add extensions for watching any video. The third thing is the extension name itself is weird enough to raise doubt about its credibility.

How Does Phishing Occur?

Below mentioned are the ways through which Phishing generally occurs. Upon using any of the techniques mentioned below, the user can lead to Phishing Attacks.

• Clicking on an unknown file or attachment: Here, the attacker deliberately sends a mysterious file to the victim, as the victim opens the file, either malware is injected into his system or it prompts the user to enter confidential data.

• Using an open or free wifi hotspot: This is a very simple way to get confidential information from the user by luring him by giving him free wifi. The wifi owner can control the user’s data without the user knowing it.

• Responding to social media requests: This commonly includes social engineering. Accepting unknown friend requests and then, by mistake, leaking secret data are the most common mistake made by naive users.

• Clicking on unauthenticated links or ads: Unauthenticated links have been deliberately crafted that lead to a phished website that tricks the user into typing confidential data.

Types of Phishing Attacks

There are several types of Phishing Attacks, some of them are mentioned below. Below mentioned attacks are very common and mostly used by the attackers.

• 👉Email Phishing: The most common type where users are tricked into clicking unverified spam emails and leaking secret data. Hackers impersonate a legitimate identity and send emails to mass victims. Generally, the goal of the attacker is to get personal details like bank details, credit card numbers, user IDs, and passwords of any online shopping website, installing malware, etc. After getting the personal information, they use this information to steal money from the user’s account or harm the target system, etc.

• 👉Spear Phishing: In spear phishing of phishing attack, a particular user(organization or individual) is targeted. In this method, the attacker first gets the full information of the target and then sends malicious emails to his/her inbox to trap him into typing confidential data. For example, the attacker targets someone(let’s assume an employee from the finance department of some organization). Then the attacker pretends to be like the manager of that employee and then requests personal information or transfers a large sum of money. It is the most successful attack.

• 👉Whaling: Whaling is just like spear-phishing but the main target is the head of the company, like the CEO, CFO, etc. a pressurized email is sent to such executives so that they don’t have much time to think, therefore falling prey to phishing.

• 👉Smishing: In this type of phishing attack, the medium of phishing attack is SMS. Smishing works similarly to email phishing. SMS texts are sent to victims containing links to phished websites or invite the victims to call a phone number or to contact the sender using the given email. The victim is then invited to enter their personal information like bank details, credit card information, user id/ password, etc. Then using this information the attacker harms the victim.

• 👉Vishing: Vishing is also known as voice phishing. In this method, the attacker calls the victim using modern caller id spoofing to convince the victim that the call is from a trusted source. Attackers also use IVR to make it difficult for legal authorities to trace the attacker. It is generally used to steal credit card numbers or confidential data from the victim.

• 👉Clone Phishing: Clone Phishing this type of phishing attack, the attacker copies the email messages that were sent from a trusted source and then alters the information by adding a link that redirects the victim to a malicious or fake website. Now the attacker sends this mail to a larger number of users and then waits to watch who clicks on the attachment that was sent in the email. It spreads through the contacts of the user who has clicked on the attachment.

Impact of Phishing

These are the impacts on the user upon affecting the Phishing Attacks. Each person has their own impact after getting into Phishing Attacks, but these are some of the common impacts that happen to the majority of people.

• ✍Financial Loss: Phishing attacks often target financial information, such as credit card numbers and bank account login credentials. This information can be used to steal money or make unauthorized purchases, leading to significant financial losses.

• ✍Identity Theft: Phishing attacks can also steal personal information, such as Social Security numbers and date of birth, which can be used to steal an individual’s identity and cause long-term harm.

• ✍Damage to Reputation: Organizations that fall victim to phishing attacks can suffer damage to their reputation, as customers and clients may lose trust in the company’s ability to protect their information.

• ✍Disruption to Business Operations: Phishing attacks can also cause significant disruption to business operations, as employees may have their email accounts or computers compromised, leading to lost productivity and data.

• ✍Spread of Malware: Phishing attacks often use attachments or links to deliver malware, which can infect a victim’s computer or network and cause further harm.

Phishing

Signs of Phishing

It is very much important to be able to identify the signs of a phishing attack in order to protect against its harmful effects. These signs help the user to protect user data and information from hackers. Here are some signs to look out for include:

• ✍Suspicious email addresses: Phishing emails often use fake email addresses that appear to be from a trusted source, but are actually controlled by the attacker. Check the email address carefully and look for slight variations or misspellings that may indicate a fake address.

• ✍Urgent requests for personal information: Phishing attacks often try to create a sense of urgency in order to trick victims into providing personal information quickly. Be cautious of emails or messages that ask for personal information and make sure to verify the authenticity of the request before providing any information.

• ✍Poor grammar and spelling: Phishing attacks are often created quickly and carelessly, and may contain poor grammar and spelling errors. These mistakes can indicate that the email or message is not legitimate.

• ✍Requests for sensitive information: Phishing attacks often try to steal sensitive information, such as login credentials and financial information. Be cautious of emails or messages that ask for sensitive information and verify the authenticity of the re

• ✍quest before providing any information.

• Unusual links or attachments: Phishing attacks often use links or attachments to deliver malware or redirect victims to fake websites. Be cautious of links or attachments in emails or messages, especially from unknown or untrusted sources.

• ✍Strange URLs: Phishing attacks often use fake websites that look similar to the real ones, but have slightly different URLs. Look for strange URLs or slight variations in the URL that may indicate a fake website.

How To Stay Protected Against Phishing?

Until now, we have seen how a user becomes so vulnerable due to phishing. But with proper precautions, one can avoid such scams. Below are the ways listed to protect users against phishing attacks:

• Authorized Source: Download software from authorized sources only where you have trust.

• Confidentiality: Never share your private details with unknown links and keep your data safe from hackers.

• Check URL: Always check the URL of websites to prevent any such attack. it will help you not get trapped in Phishing Attacks.

• Avoid replying to suspicious things: If you receive an email from a known source but that email looks suspicious, then contact the source with a new email rather than using the reply option.

• Phishing Detection Tool: Use phishing-detecting tools to monitor the websites that are crafted and contain unauthentic content.

• Try to avoid free wifi: Avoid using free Wifi, it will lead to threats and Phishing.

• Keep your system updated: It’s better to keep your system always updated to protect from different types of Phishing Attacks.

• Keep the firewall of the system ON: Keeping ON the firewalls helps you in filtering ambiguous and suspicious data and only authenticated data will reach to you.

• 🙂🙂🙂🙂🙂🙂Thanks for your patience🙂🙂🙂🙂🙂🙂