# Phishing Attacks

Phishing is a type of cyber attack that uses deception to trick individuals into giving away sensitive information, such as login credentials or financial information. The goal of a phishing attack is to steal personal information, access sensitive systems, or spread malware.

## Types of Phishing Attacks

There are several types of phishing attacks, including:

- **Email phishing**: This is the most common type of phishing attack. It involves sending an email that appears to be from a legitimate source, such as a bank or a government agency, and contains a link or an attachment that, when clicked, downloads malware or redirects the user to a fake website designed to steal personal information.
- **Spear phishing**: This type of phishing attack is targeted at specific individuals or organizations. The attacker may use personal information, such as the victim’s name or job title, to make the email appear more legitimate.
- **SMS phishing**: Also known as “smishing,” this type of phishing attack uses text messages to trick individuals into giving away personal information.
- **Vishing**: This type of phishing attack uses phone calls to trick individuals into giving away personal information.

## Protecting Yourself from Phishing

To protect yourself from phishing attacks, it is important to be aware of the signs of a phishing attempt and to exercise caution when clicking on links or downloading attachments from unknown sources. Additionally, you should:

- Be suspicious of unsolicited emails, even if they appear to be from a legitimate source.
- Be wary of emails that contain urgent language or ask for personal information.
- Be cautious when clicking on links or downloading attachments, even if the email appears to be from a trusted source.
- Use anti-virus software and keep it updated.
- Use two-factor authentication, if available.
- Keep your software and operating system up to date.
- Use a password manager to generate and store strong, unique passwords for each of your accounts.
- Educate yourself about the latest phishing techniques and how to avoid them.

## Organizational Security Measures

It is also important for organizations to implement security measures to protect against phishing attacks, such as:

- Employee education and awareness training
- Email filtering and anti-spam solutions
- Web filtering and security software
- Regular security audits
- Implementing an incident response plan

Remember that phishing is an ongoing threat and new tactics are being developed all the time, so staying informed and vigilant is key to staying safe online.

## Recent Cyber Scams Related to COVID-19

With the world grappling with a health pandemic, scams are shocking. Cybercriminals take advantage of fear, using timely concerns to target victims. Several coronavirus-related attempts to cyberscam people have been reported:

- Emails that appear to come from government health departments.
- Offers of a tax refund to get people to click on malicious links.
- Memos to staff that appear to come from large employers.
- COVID-19 test offerings from private companies.
- Fake websites promising to sell face masks or hand sanitizer.
- Soliciting donations to help fund a vaccine.

### What to Watch Out For

Another concern is the growing number of bogus websites registered with names relating to COVID-19. The site may look legitimate but is set up to steal information or infect the victim’s computer with malware. You may receive emails promising information about coronavirus safety measures or information purportedly shared by the World Health Organization (WHO). Always question emails that claim to be from reputable news sources.

### Precautions

When receiving suspicious communications:

- Be wary of anything that plays on your emotions and urges immediate action.
- Question the origin of the emails, even if they appear to come from a reliable source.
- Hover over links before clicking them to see their destination.
- Avoid downloading attachments if you didn’t ask for them.
- Doubt any deals that sound too good to be true.
- Ignore requests for personal information.

You’re encouraged to navigate directly to reputable health institutions for real news if unsure about the validity of a communication. While there is not a vaccine for COVID-19, you can protect your computer with antivirus software and ensure your software is always updated.

Stay safe both physically and online.