{"id":710,"date":"2021-10-21T15:04:08","date_gmt":"2021-10-21T20:04:08","guid":{"rendered":"https:\/\/cmitsolutions.com\/boston-ma-1089\/?p=710"},"modified":"2023-03-23T23:25:11","modified_gmt":"2023-03-24T04:25:11","slug":"how-to-catch-phishing-red-flags-2","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/boston-ma-1089\/blog\/how-to-catch-phishing-red-flags-2\/","title":{"rendered":"How to Catch Phishing Red Flags"},"content":{"rendered":"

 <\/p>\n

How To Catch Phishing Red Flags<\/strong><\/h1>\n

Phishing attacks and scams have thrived since the COVID pandemic began in 2020 and today, phishing attacks account for more than 80 percent of reported security incidents<\/span><\/a>. Week 2 of Cybersecurity \u00a0Awareness Month stresses the importance of being wary of phishing emails, text messages or chat boxes that come from a stranger or someone you were not expecting. Luckily there are phishing red flags you can catch if you stay diligent.<\/p>\n

Despite often being overlooked in terms of hype, phishing has been a mainstay in the cybersecurity threat landscape for decades. In fact, 43 percent<\/a> <\/span>of cyberattacks in 2020 featured phishing or pre-texting, while 74 percent<\/a> <\/span>of US organizations experienced a successful phishing attack last year alone. That means that phishing is one of the most dangerous \u201caction varieties\u201d to an organization\u2019s cybersecurity health. As a result, the need for proper anti-phishing hygiene and best practices is an absolute must.<\/p>\n

With that in mind, here are the red flags and best practice tips for dealing with phishing threats.<\/p>\n

What Are The Red Flags?<\/strong><\/h3>\n

Phishes are masters of making their content and interactions appealing. From content design to language, it can be difficult to discern whether content is genuine or a potential threat, which is why it is so important to know the red flags.<\/p>\n

\"\"<\/p>\n

URGENT OR THREATENING LANGUAGE<\/span> \u00a0– <\/strong>Any messaging that creates a sense of urgency or threatening language meant to trigger you into taking immediate action is a phishing red flag that the content you received could be from a phish and should be handled with caution.<\/p>\n

\"\"<\/p>\n

SPELLING AND GRAMMAR MISTAKES<\/span> – <\/strong>Look closely! If there are spelling errors and poor grammar usage, it is typically a sign of a phishing attempt. Trickier mistakes that may be harder to spot are when zeros (0\u2019s) will be in place of O\u2019s.<\/p>\n

\"\"<\/p>\n

AWKWARD AND UNUSUAL FORMATTING<\/span> – <\/strong>Does the spacing looks off to you? If the formatting is out of whack it, follow your intuition that something is wrong and be prepared to flag the message.<\/p>\n

\"\"<\/p>\n

REQUESTS FOR MONEY OR PERSONAL INFO<\/span> – <\/strong>This phishing red flag can come in various forms and is not always easy to spot. Any messaging or social media posts requesting you to share your personal information \u2013 no matter how seemingly harmless \u2013 is a phishing attempt to expose your password information. Be extra wary of anything asking for information typically asked on verification sites. Such as your street name, high school name, favorite foods, etc.<\/p>\n

\"\"<\/p>\n

OVERLY EXPLICIT CALLS TO ACTION<\/span> – <\/strong>Most phishing attempts exploit urgency and trick you into clicking on a compromised link or attachment. Think before you blindly click!<\/p>\n

Verify The Source<\/strong><\/h3>\n

Is the message really who it says it is from? \u00a0Many phishes will try to impersonate someone you may already know — such as a colleague, service provider or friend — as a way to trick you into believing their malicious content is actually trustworthy. Don\u2019t fall for it. If you sense any red flags above that something may be out of place or unusual, reach out directly to the individual to confirm whether the content is authentic and safe. If not, break-off communication immediately and report the incident through the proper channels.<\/p>\n

Be Aware of Vishing and Other Phishing Offshoots<\/strong><\/h3>\n

As more digital natives have come online and greater awareness has been spread about phishing, bad actors have begun to diversify their phishing efforts beyond traditional email. For example, voice phishing — or vishing<\/span><\/a> — has become a primary alternative for bad actors looking to gain sensitive information from unsuspecting individuals. Similar to conventional phishing, vishing is typically executed by individuals posing as a legitimate organization — such as a healthcare provider or insurer — and asking for sensitive information. Simply put, it is imperative that individuals be wary of any sort of communication that asks for personal information whether it be via email, phone or chat — especially if the communication is unexpected. If anything seems suspicious, again, break-off the interaction immediately and contact the company directly to confirm the veracity of the communications.<\/p>\n

Fight The Phish<\/strong><\/h3>\n

Phishing may be \u201cone of the oldest tricks in the book,\u201d but it is still incredibly effective. And although it may be hard to spot when you may be in the midst of a phishing attempt, by exercising caution and deploying these few fundamentals, individuals and organizations more broadly can drastically mitigate the chances of falling victim to a phishing attack.<\/p>\n

Stay tuned each week in October as we\u2019ll post a new blog for Cybersecurity Awareness Month.<\/p>\n

Written by: Chris Zambuto<\/span><\/a> | Chief Information Security Officer @<\/a><\/span>CMITBostonCambridge<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

  How To Catch Phishing Red Flags Phishing attacks and scams have…<\/p>\n","protected":false},"author":259,"featured_media":711,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28],"tags":[],"class_list":["post-710","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blog"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/posts\/710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/comments?post=710"}],"version-history":[{"count":0,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/posts\/710\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/media\/711"}],"wp:attachment":[{"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/media?parent=710"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/categories?post=710"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cmitsolutions.com\/boston-ma-1089\/wp-json\/wp\/v2\/tags?post=710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}