Monday, November 13, 2023

Here, Phishy Phishy!

 Have you ever been the target of a phishing scam?

The answer is yes. We all have. Phishing happens ALL the time. 

Have you ever fallen victim to a phishing scam?

That one is harder to answer. Hopefully, the answer is no, but if you've actually ever fallen for phishing, you're in good company.

So, are you asking yourself, "What is phishing?" I asked ChatGPT for a simple way to explain it and here's what I got: "Phishing is a type of online scam where attackers use deceptive emails, messages, or websites to trick people into revealing sensitive information, such as passwords or credit card numbers. It often appears as if the communication is from a trustworthy source to gain the victim's trust."

I couldn't have explained it better myself 😀

Phishing used to be pretty easy to spot -- look at the email address of the sender, check for misspellings or pretty obvious grammatical mistakes, watch for outrageous requests (like huge amounts of money to be transferred to your account in order to help some distant relative avoid tax and they'll reward you by leaving some money in your account), or other super obvious laughable hallmarks. But phishing has gotten significantly more sophisticated which makes it harder to detect which then makes it easier to get scammed.

So how can you avoid getting phished? Once again, I have my own ideas and suggestions, but I want to be as thorough as possible so ChatGPT is helping me out again:

- **Double-check sender**: Verify the sender's email address or message to ensure it's from a legitimate source.

- **Be cautious with links**: Don't click on suspicious links; hover over them to see the actual URL before clicking.

- **Check for typos and errors**: Phishing messages often contain spelling and grammar mistakes. Or the phrasing sounds off. Or words are misused. These are all signs of a possible phishing scam.

- **Look for official communication**: Legitimate organizations usually use official channels; be wary of unexpected messages asking for personal information. Example: the USPS usually doesn't send text messages (think: how would they have your cell phone number?)

- **Use security features**: Enable two-factor authentication when possible for an extra layer of protection.

- **Keep software updated**: Regularly update your operating system, antivirus, and other software to patch security vulnerabilities.

- **Educate yourself**: Stay informed about common phishing tactics and techniques to recognize potential threats.

- **Verify requests for sensitive information**: If you receive a request for personal or financial information, verify it through a trusted and independent method before responding. For instance, don't use a number or link in a message to contact your credit card company. Instead, use the number on the back of your card, or log into your account and contact them through that method.

- **Be skeptical of urgency**: Phishing emails often create a sense of urgency; take a moment to verify before acting hastily.

- **Use reputable sources**: When downloading files or clicking links, rely on reputable sources to minimize the risk of malware. Sadly, teachers can really put themselves and their school network at risk because Teachers Pay Teachers has been known to be a common source of malware. Go through sellers you've worked with before, or at the very least read reviews of sellers before purchasing from a new one.

- **Trust your instincts**: If something feels off, even if it seems official, double-check and verify before providing any sensitive information. Don't ever be afraid to ask for help -- from your tech team, from a colleague, from a trusted friend or family member. Better safe than sorry!

Now, are you up for a challenge? Click here to try out this phishing quiz! Full disclosure: I did not get a perfect score! I missed 3 of these, so that just shows how good these phishers are at what they do! 


Want a cool magnet to show you aren't going let yourself get phished? No problem! Send me an email with one thing you learned from this post, or share your score on the quiz! I'll have a great magnet for you!


8 comments:

  1. Replies
    1. Not to worry -- this was tough, just like real phishing!

      Delete
  2. Replies
    1. No worries -- phishers are really good at what they do!

      Delete
  3. Janine and Leslie are better than me, I had 4/8. Might explain why my persona email is 50% spam

    ReplyDelete
    Replies
    1. It's all a learning experience, and phishing emails can be very convincing!

      Delete
  4. Great advice! I got 6/8. It scares me how real things look!

    ReplyDelete
  5. Yes, that's the thing: phishers are professional scam artists. They are so good at what they do :-(

    ReplyDelete