Phishing 101

What is Phishing?

Phishing is a type of cyberattack in which scammers attempt to steal sensitive data like passwords or financial information by posing as trustworthy sources.

A successful phishing attempt can result in irreparable damage to you and your company, including stolen funds or fraud, exposure of personal information, and identity theft.

What does phishing look like?

Phishing attacks most often come in the form of an email, text, or phone call. Attacks are meant to look like they come from a legitimate source, like a bank, service provider, or even a coworker/supervisor. They often threaten you with something like deleting your account unless you take immediate action or offer you a prize that seems too good to be true.

How do I avoid a phishing attack?

1.      Don’t trust a display name. Click into the sender’s profile to check if they are really who they say they are. Keep an eye out for subtle changes, like “rnicrosoft” or “wellsfarg0.”

2.      Look for spelling and grammar errors. Phishing emails commonly contain poor English.

3.      Check before clicking. Hover your mouse over a link to see where it is really taking you. Be wary of buttons that say, “Click Here!” or attachments you weren’t expecting.

4.      Read the greeting. Emails addressed to “Valued Customer,” “Employee,” or that don’t address you at all should be treated with caution.

5.      Verify contacts. See if the email contains legitimate contact information by checking it against the company’s official website or social media.

6.       Beware of threats. Phrases like “urgent,” “immediate action,” or threats to your account or information are common scare tactics to get you to fall for a phish attack.

7.      Report it. If you think an email, text, or call is a phishing attempt, report it to the IT helpdesk using the “Phish Alert” button in outlook or by sending in a ticket. We can tell you if it is safe or not.  

What should I do if I think I’ve been phished?

Change the password for the affected account and all other accounts that may be connected to it or that share a password with it. Contact the helpdesk team immediately at helpdesk (at) lyndendoor.com or at extension #1590 for further instruction.