INTHEKNOW
by Farhad Rahaman for The Institute of Risk Management South Africa (IRMSA)
Do you know how to identify a
phishing email? In this modern-day, tech-savvy world, we would like to believe that we could never be fooled by a social engineering scam or phishing attempt!
P
hishing is the fraudulent attempt to obtain sensitive information such as usernames, passwords and credit card details by disguising oneself as a trustworthy entity via electronic communication. The reality is that it is easy to catch someone in this way. Here are some tips to look out for so that you do not become just another phishing statistic: Do not trust the display name. A favourite phishing tactic is to spoof (imitate) the display name of an email to give it an air of legitimacy. If you click on the name, you will notice that the address differs from the display. Look but do not click. Hover your mouse over any links embedded in the body of the email. If something seems even remotely strange, do not click on it. Check for spelling mistakes. Brands usually do not make careless mistakes. This is an easy tell. Cybercriminals also
50
CeO 2020 Vol 20.3
do this purposefully to target less observant users. Analyse the salutation. Watch out. Legitimate businesses usually use a personal salutation with your first and last name rather than a vague salutation. Beware of urgent, threatening language. This is a common strategy to create a sense of panic, or to entice you to use poor judgement. Review the signature. If you cannot find the sender’s details, or information on how to contact the company, this is probably a phish. Legitimate businesses always provide contact details. Do not click on attachments or links. Including malicious attachments that contain viruses and malware is a common phishing tactic used to damage files on your computer, steal passwords or to spy on you without your
