How to prevent Phishing — Transcript

Full transcript

1. 0:08email is one of the most powerful attack
2. 0:11methods in the Cyber criminals Arsenal
3. 0:13simply because so many people depend on
4. 0:16email in their daily lives what makes
5. 0:18email so dangerous is cyber criminals
6. 0:21can easily pretend to be someone or some
7. 0:24you trust such as your friend or your
8. 0:27bank these email attacks are often
9. 0:30called fishing work by tricking you into
10. 0:33doing something for example here is an
11. 0:36email sent by a cyber criminal
12. 0:38pretending to be a well-known Bank the
13. 0:41email is very professional looking
14. 0:43including the bank's logo the email says
15. 0:46there is a problem with your account and
16. 0:48that if you do not update your account
17. 0:50immediately it will be deactivated it
18. 0:53then requires you to click on a link and
19. 0:55log in to the website if you click on
20. 0:58this link you are taken to a website
21. 1:01that looks real but in reality is a
22. 1:03website controlled by the Cyber criminal
23. 1:06designed to steal your information
24. 1:09including your login and
25. 1:11password keep in mind many email attacks
26. 1:14go beyond just stealing your information
27. 1:17their goal is to infect your computer
28. 1:21for example cyber criminals will send
29. 1:23emails with links just as we saw in the
30. 1:26previous example however instead of
31. 1:29these links sending you to websites that
32. 1:31steal your information they take you to
33. 1:34websites that silently hack your browser
34. 1:37infecting your computer and taking it
35. 1:39over or instead of links criminals will
36. 1:42send emails with infected
37. 1:44attachments here is an example of what
38. 1:47appears to be an email from a legitimate
39. 1:49organization but in reality is an
40. 1:52attempt by criminals to get you to open
41. 1:55an infected
42. 1:57attachment in addition to General
43. 1:59fishing attacks cyber criminals utilize
44. 2:02a more targeted attack called spear
45. 2:05fishing spear fishing is a highly
46. 2:08customized attack where only a few
47. 2:10emails are sent to specific individuals
48. 2:13within our organization these emails
49. 2:16appear very realistic often with a
50. 2:18subject that is relevant to the victim's
51. 2:20job or appear to come from individuals
52. 2:23that the victim highly trusts spear
53. 2:26fishing attacks are harder to detect but
54. 2:29also require more work and research by
55. 2:32the Cyber criminal another common email
56. 2:35attack is scams these are messages
57. 2:38telling you that there are millions of
58. 2:40dollars sitting in Africa waiting for
59. 2:43you to recover or that you won the
60. 2:45lottery even though you never entered it
61. 2:48the goal of these scams is to either get
62. 2:50your money or your information the
63. 2:53stories are often quite convincing but
64. 2:56are nothing more than cyber criminals
65. 2:58attempting to fool will you finally
66. 3:01there is instant messaging just like
67. 3:04email instant messaging can be used for
68. 3:06many of the attacks we have discussed so
69. 3:09far for example instead of sending out
70. 3:12scams or malicious links via email
71. 3:15cybercriminals may do it via instant
72. 3:18messaging in most cases simply opening
73. 3:21an email or reading an instant message
74. 3:24is safe for most attacks to work you
75. 3:27have to do something after reading the
76. 3:29message
77. 3:30such as opening the attachment clicking
78. 3:32on the link or responding to the request
79. 3:35for information to protect yourself keep
80. 3:38the following in mind just because a
81. 3:41message comes from a friend or someone
82. 3:43you know does not mean the message is
83. 3:46safe cyber criminals may have infected
84. 3:49their computer or spoofed the from
85. 3:51address if you are suspicious about a
86. 3:54message from someone you know call the
87. 3:56person to verify if it was truly them
88. 3:59that sent
89. 4:00it be suspicious of any email directed
90. 4:03to Dear customer or some other generic
91. 4:07salutation be skeptical of any message
92. 4:10that requires immediate action creates a
93. 4:13sense of urgency or threatens to shut
94. 4:15down your account be suspicious of
95. 4:18messages that claim to be from an
96. 4:20official organization but have grammar
97. 4:23or spelling mistakes most organizations
98. 4:26have professional writers and do not
99. 4:28make these mistakes
100. 4:30takes before you click on a link hover
101. 4:33your mouse over it this will display the
102. 4:35true destination of where you would go
103. 4:38confirm that the destination displayed
104. 4:40matches the destination in the email and
105. 4:43is going to the organization's
106. 4:45legitimate website even better is to
107. 4:48type the website into your browser for
108. 4:51example if you get an email from your
109. 4:53bank asking you to update your bank
110. 4:55account do not click on the link instead
111. 4:59type your bank's website in your browser
112. 5:02then log in to the website
113. 5:04directly be careful with attachments
114. 5:07only open attachments you were expecting
115. 5:10cyber criminals can send you infected
116. 5:13attachments that can potentially bypass
117. 5:15your
118. 5:17antivirus using email and instant
119. 5:19messaging safely is ultimately about
120. 5:22common sense if a message sounds
121. 5:24suspicious or too good to be true it is
122. 5:27most likely an attack simply delete the
123. 5:30message if you get a message and you are
124. 5:33not sure if it is an attack contact your
125. 5:36help desk or information security
126. 5:48team