Blog
What is Phishing?
Phishing is an example of social engineering against businesses, and is defined as the fraudulent attempt to obtain sensitive information, often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
In this specialist guide, we explore the cyber attack style and guide you through how to protect your customers, data, and staff.
How does Phishing Work?
These form of attacks rely on a communication, such as a text message or an e-mail. The attacker may use the message to distribute a malicious link that appears trustworthy to take information such as account details from the victim. Another common style of Phishing is using a scam.
This is often with the promise of a large reward, the scammer aims to convince the victim to give up details such as their credit card information. These messages are often hard to distinguish from safe messages.
Understanding essential business cyber security advice is a strong start, complemented by a wider comprehension of each cyber threat.
The Different Types of Phising Attacks
There are many types of phising your business needs to be aware of, which can help you setup security measures to prevent any data breaches.
Spear Phishing
This is an attempt that is directed at a specific individual. Attackers may gather personal information about their target to increase their chances of success. This technique accounts for 91% of all Phishing attacks on the Internet. In 2015, Ubiquiti Networks Inc. lost $46.7 million to a Spear Phishing attack. This proves just how successful this social engineering technique can be.
Clone Phishing
This type of phishing attack where a legitimate email containing an attachment or link has had its content taken and changed to create an almost identical email. The attachment or link within the email is replaced with a malicious version, and then sent from a spoofed email address. As this e-mail appears to be a resend or edit of the original, it is difficult to distinguish it from a safe e-mail.
Whaling
Whaling is a type of attack that is specifically aimed at high-profile targets within businesses. The content of the masquerading web page/email will often take the form of a legal document, customer complaint or executive issue. Whaling Phishers have been known to forge documents from Authorities, and thus these emails are very difficult to distinguish or ignore.
How can you Protect Yourself from Phishing?
There are multiple ways to protect yourself and your business from phishing scams:
Anti-Phishing websites, such as FraudWatch International, post exact phishing e-mails that are currently circulating the internet.
Familiarise yourself with techniques to spot the conventions of a typical Phishing scam.
Use a web browser with features to prevent you from accessing malicious webpages.
Use a spam filter on your inbox.
Consider Cyber Essentials certification.
The good news is we're here to help. Contact our experienced support team today for a free consultation, we'll help to secure your data.
Share your challenge with us and we’ll help you find the right level of support for your business.
