Cybercriminals often use various techniques to gain unauthorized access to computer systems and obtain sensitive credentials. One of the most common methods involves impersonating trusted entities through electronic communication channels and using social engineering tactics to extract information or access from unsuspecting individuals. Phishing, Smishing (SMS phishing), and Vishing (voice phishing) are some of the most prevalent types of attacks, which are becoming increasingly sophisticated.
- Understand the prevalence of phishing, smishing, and vishing attacks and their ever-increasing sophistication.
- Be vigilant and carefully review all emails, texts, and phone calls or voicemail messages you receive before taking any action (including opening attachments, clicking links, calling phone numbers, and providing personal, confidential information).
- If you receive an email, text, or phone call or message from a company, such as a financial institution, especially if they are seeking urgent action, contact them directly using the contact information you obtain versus responding to the email, text, or call.
- If your employer or personal email provider have implemented ‘Report Phishing’ functionality, be sure to report all suspicious email. Your input can help improve phishing detection mechanisms.