What is Phishing?
Phishing is a scam in which an attacker uses various tactics to entice you into divulging personal information such as credit card numbers, account usernames, passwords, social security number, or any other personal information.
How does phishing work?
Phishing schemes typically come either in email or sometimes via pop-up windows. The attacker sends you an email pretending to be from a valid business (typically a financial institution, online retailer, or credit card company). The email will attempt to coerce you into visiting a fake website and entering your personal information. The attacker has set-up this fake website and will then collect your information for illegal purposes such as Identity Theft.
What are some examples of phishing scams?
The following two emails are examples of phishing scams which have been received by users at Northwood University. Please note the attempts to make the email seem legitimate. Attackers will use real company logos and create web links that appear to be valid, however these links direct you to their fake websites. Also, note the language used and the sense of urgency the attacker is attempting to create.
For numerous other examples visit the Anti-Phishing Working Group Archive
What can I do to help protect myself?
While these attacks are always changing and becoming more sophisticated, there are a few general hints that can help in protecting you from phishing scams.
- Never respond to requests for personal or financial information via email. If you are in doubt, call the institution to verify the legitimacy of the request.
- If you want to check the institution's website, do so by typing the address into your web browser rather than clicking a link in email.
- Check your bank and credit card statement regularly to make sure all transactions are legitimate.
- Make sure your web browser has the latest security patches on your home PC. This is done automatically for Northwood owned computers.
- Report suspected phishing attempts to the proper authorities by forwarding the email to the "abuse" email address of the company that is being spoofed. Typically, this will be abuse@companyname.com; however, if you are unsure please check the company’s website. Remember to type the company’s address into your browser instead of clicking the link in the email.
- Visit the following links for further information and precautionary measures:
IT Calendar
Responsibility:
We will be accountable for the care and welfare of others and responsible for the intended and unintended consequences of our actions.
More Ethics
