Phishing
Majd Abuleil
2 min read


Phishing is a type of scam where attackers trick people into giving away personal information like passwords or credit card numbers.
Common Types of Phishing:
Email Phishing: Attackers send emails that appear to come from reputable sources, such as banks, online services, or employers. These emails often contain links to fake websites designed to steal login credentials.
Spear Phishing: This is a targeted attempt aimed at specific individuals or organizations. Attackers gather personal information about the target to make the attack more convincing.
Whaling: Aimed at high-profile targets like company executives.
Smishing (SMS Phishing): Attackers send text messages that appear to be from legitimate sources, urging recipients to click on a link or provide personal information.
Vishing (Voice Phishing): Attackers use phone calls to impersonate trusted entities, like banks or government agencies, and trick individuals into providing sensitive information.
How Phishing Works
Fake Messages: Scammers send messages that seem to be from trusted sources, often creating urgency to act quickly.
Bad Links and Attachments: These messages contain links to fake websites or attachments with harmful software.
Stealing Data: When victims enter their information on a fake website or open an infected attachment, their data is sent to the attacker. This information can then be used for further attacks or sold on the dark web.
How to Protect Yourself
Stay Informed: Learn how to spot phishing attempts and know what to do if you see one.
Email Filters and Security Software: Use tools to block suspicious emails and protect your computer from malware.
Verify Requests: Double-check any unexpected requests for your info by contacting the company directly.
Two-Factor Authentication (2FA): Using 2FA adds an extra layer of security, making it more difficult for attackers to gain access even if they obtain login credentials.
Keep Everything Updated: Regularly update your software to protect against security flaws.
How to Recognize Phishing
Check Email Addresses: Look closely at the sender’s email address. Phishing emails often use addresses that look almost, but not quite, right.
Beware of Urgency: Be wary of emails that create a sense of urgency or contain threats that pressure you to act fast.
Spelling and Grammar Errors: Many phishing emails contain spelling and grammar mistakes, like “Costumer” instead of “Customer” OR “Verificashun” instead of “Verification”.
Unusual Requests: Be suspicious of unexpected requests for sensitive information.