Heart of Texas Network Consultants Blog

How a Phishing Scam Works and What You Can Do to Protect Yourself

b2ap3_thumbnail_social_engineering_magnet_400.jpgMost hacking attacks are the result of a flaw or vulnerability found within the code of a program or operating system, but we rarely take into account the ones that don’t. Hackers often take advantage of the human side of hacking as well, a process known as “social engineering.” This is usually the act of conning users into handing over personal information of their own free will, and it’s surprisingly effective.

As you can imagine, social engineering involves exploiting the people who work with the technology rather than the technology itself. This particular method allows those who might not be as tech-savvy (or those who aren’t particularly known for their common sense) to obtain important information, like passwords or dates of birth, from unsuspecting foes. Those who are more skilled with technology can perform more elaborate social engineering attacks, like replicating websites to infect systems with malware upon visitation, or download infected software.

The most well-known social engineering hacking attack comes in the form of a phishing attack. These are typically the type of emails which appear to be the genuine article from an institution you might have relations with, such as a bank. These emails request that you update or confirm your personal information. It can be difficult to discern these from the real deal at times.

Other, more focused attacks are called spear phishing attacks. These are designed to target a specific individual, or multiple specific targets. Sending emails personalized to get users to fork over financial information, or even going to lengths such as contacting your business posing as someone from a media outlet.

According to HowToGeek.com, this method isn’t limited to being used remotely. Social engineering hackers can also get up close and personal with their attempts:

An attacker could walk into a business, inform the secretary that they’re a repair person, new employee, or fire inspector in an authoritative and convincing tone, and then roam the halls and potentially steal confidential data or plant bugs to perform corporate espionage. This trick depends on the attacker presenting themselves as someone they’re not. If a secretary, doorman, or whoever else is in charge doesn’t ask too many questions or look too closely, the trick will be successful.

How To Prevent Social Engineering Attacks
In the end, keeping your business safe from social engineering attacks comes down to identifying them from the genuine article. In order to minimize the risk of falling prey to these hacks, keep these tips in mind.

  • Some suspicion is better than none at all. If you’re receiving strange emails, messages, or phone calls from users you don’t recognize, it’s best to be on the safe side and not respond until you’re sure that you’re dealing with the real deal. It’s better to call the institution at the number you have on record before handing over any information you feel is suspicious. If something seems suspicious, such as poorly worded emails and strange links, it's best to question it.
  • Avoid links in emails to websites which gather sensitive information. These websites could be fake phishing sites designed to look like the official institution website. For example, you receive an email asking to update your bank information, and the link leads to a sign-in form. This is a fake site designed to fool you into entering your credentials. In this case, it’s best to try logging into the official site rather than through the email. Look at the URL and scan it for subtle differences which might hint at trickery.
  • Enable spam and phishing filters for your email and browser. Some browsers have built-in phishing and security filters, which should always be active. These can prevent your employees from accessing a known phishing site. One particularly powerful solution is Heart of Texas Network Consultants’s Unified Threat Manager (UTM). This solution equips your business with everything it needs to keep outside threats from getting into your network, including spam filtering and web content blocking.

Ultimately, the best defense against social engineering hacking attempts is to stay vigilant and educated about how to best approach suspicious situations on the web. Heart of Texas Network Consultants can equip your business with the tools it needs to stay safe and educate your staff on how to identify fraud when they see it. For more information about how Heart of Texas Network Consultants can keep your business safe, give us a call at (254) 848-7100.

Your Droid Phone is Inferior to the Greatest Droid...
Tip of the Week: How to Prevent Your Mobile Data f...


No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Monday, August 19 2019

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Productivity Unsupported Software Automation Two-factor Authentication Bandwidth Humor Search Passwords Government Office Tips Hardware Social Mobile Devices Tip of the Week Internet of Things Work/Life Balance Upgrade Save Money Business Vendor Management Windows 10 Laptop Efficiency Productivity USB Shortcut Encryption Money Youtube Data Security The Internet of Things Ransomware Networking Software WiFi Wireless Applications Wireless Technology Browser Health Chrome Data Backup Mobile Office VoIP Analytics Data Hosted Solutions User Error IT Support Law Enforcement Facebook BDR Best Practices Wi-Fi Artificial Intelligence Smartphone Security Mobility Microsoft Office Router Managed IT Services Gmail Maintenance Users Education Remote Computing Disaster Recovery Smartphones Application Cybersecurity IT Services Tech Term Going Green Server Current Events Risk Management Cloud Computing Microsoft Blockchain Tech Support Malware Data Recovery Miscellaneous Avoiding Downtime Antivirus Vulnerability Gadgets Password Virtualization Tablet Hacking Social Media Business Management User Tips communications Quick Tips Internet Employer-Employee Relationship iPhone Information Technology App Outsourced IT Technology Managed Service Provider Business Continuity Cybercrime Managed IT Services Phishing Windows 10 Best Practice Google Drive Managed Service Communication Telephone Systems Business Computing Alert Saving Money Cloud Marketing Cost Management Update Privacy Mobile Computing Small Business Apps Collaboration Office Workplace Tips Android Bring Your Own Device Printer Lithium-ion battery Hard Drives IT Support PowerPoint Hackers Backup Network History Unified Threat Management Big Data Computer OneNote Office 365 Customer Relationship Management Innovation Mobile Device Management Information Email Holiday Proactive IT Computers Google Data Management Windows 8 Spam BYOD Windows Operating System Network Security