How to Avoid Social Engineering Attacks
Everyone on the planet has been sent a phishing email at one time or another. Fraudulent attempts to obtain passwords and credit card numbers affect everyone who spends time on the internet.
Also Read: How to Avoid Scams of Good Friday
Cybercriminals know that by masquerading as trusted collaborators, they can participate in an electronic communication that makes their target vulnerable. Social engineering allows for many types of cyberattacks - phishing is one of the most common and widespread forms.
Social engineering is a technique used by hackers who seek to find a weakness using human psychology and a variety of media, with the aim of deceiving the victim. When the target does not suspect any malicious activity, it is led to expose sensitive data which will be used to replicate the identity. When a personal data item is revealed, it can open up a complete personal platform including credit card numbers, passwords and more. The information is then used for unauthorized purchases, etc.
What to pay attention to
At this point, most people are aware enough to know when they are being targeted. But some phishing attempts are so professional that they are difficult to detect.
Beware of emails that:
- Use link shorteners, like bit.ly, which are intended to deceive the recipient into believing that the URL is from a legitimate company.
- Include links in an email to redirect the user to a suspicious site, even if the site looks authentic
- Create urgency and fear in order to prompt the user to act quickly
- Ask for personal information, such as an address or password
- Are not personalized - do not use your name, but "Hello customer"
- Have grammar or spelling mistakes
Psychology and curiosity
Hackers are skillful and know exactly how to capture the interest of their target using their best social skills. They are also chameleons and can pose as someone they trust; like a bank representative or a co-worker. In most cases, they even have the appropriate references to completely deceive their victims.
Some of the latest social engineering scams in 2019:
- Click here to get your refund
- Your loan is approved, call…
- Your payment is overdue again, so we've closed your account.
- The account is suspended - click here to contact customer support.
How to Avoid Social Engineering Attacks
If you have not yet experienced phishing traps, we recommend that you follow these instructions:
- Never provide personal or financial information by email.
- Never follow an embedded link. Instead, enter the company URL and go directly.
- Change your passwords regularly; especially those used for everything related to your finances.
- Check your bank and credit card transactions weekly to make sure there are no unauthorized fees.
- Review your credit reports with Equifax Canada or TransUnion Canada.
- Install security software and a firewall that will protect your computer and mobile phone against viruses and outside attacks.
- Use multi-step verification with multiple identifying factors to log into your accounts.
