Why Phishing Scams Work
As an information technology professional, I am very much aware of the dangers that lurk on the internet. I always use extreme caution when checking email and browsing to websites I dont know anything about, because I know how quickly spyware can install on any computer including mine. Im ashamed to say that I nearly fell victim to a phishing scam I received this morning at work, which made me realize just how easy it is to get taken in by cyber-criminals. Heres how it happened:
As I hurriedly sorted through three days worth of emails, deleting spam and opening anything that looked important, I casually opened an email from Ebay telling me that I had an unpaid item which resulted in a strike against me. My first reaction to the email was no way theyve made a mistake, and I immediately went for the link to find out what this was all about. Fortunately, I came to my senses in time and did not click. I suddenly realized (in the nick of time) that I didnt use this email address with Ebay, and knew instantly that this was a phishing scam.
At that point it occurred to me that the reason phishing scams are so successful is because we dont always focus on what were doing, and we often let our guard down. Phishing scams such as this one are designed to play on our emotions, and it worked (almost) in this instance. I wasnt thinking about anything except getting through hundreds of emails so I could start my day, and the message from Ebay triggered a defensive emotion that made me react quickly. This is exactly what the phisher wanted me to do, and I almost became another success for him.
COMMON MISCONCEPTION If Im careful, I have nothing to worry about
Many people think that as long as they dont open any fraudulent emails that they are safe from Phishing Scams. While it is true that you cannot become an email phishing victim if you dont reply to or click on a link in a spoofed mail, it is also true (as I proved to myself today) that under the right circumstances even the most security-conscious individuals can be fooled.
Even the most security-aware and cautious internet users cannot protect themselves by practicing good safety habits online because of an important flaw were human. Although its extremely important to have knowledge and awareness of the security threats that exist on the internet, we also need a safeguard to protect us when we let our guard down.
SECURITY SOFTWARE - YOUR PARTNER ON THE INTERNET
Everyone who uses the internet, regardless of how diligent they are about practicing safe email and browsing habits, must use some form of internet security software. Think of security software as your partner on the internet, covering your back in the event something creeps up on you.
- To protect against phishing scams, its important to have a good anti-spam product installed. This will prevent you from even seeing most of the phishing emails, thus greatly reducing the possibility that you will be caught off guard. Spam blocking software will not necessarily stop all phishing scams from reaching your inbox, but it will stop a lot of it. In my case today, one got through.
- In the event you do click on a link in a fraudulent email, you will want to be protected by a good anti-spyware program, which will detect and remove any drive by spyware that gets installed on your PC.
- You should also have a good personal firewall in place. This will help safeguard your private information and will also block any open ports that might be used as an open doorway to your private data by spyware and hackers.
WHAT INTERNET SECURITY SOFTWARE TO GET
For most users, I recommend using a good internet security suite. This is bundled software from the same company that includes an antivirus, anti-spyware, spam blocker, and personal firewall application. Security suites are easy to install, configure, and use because all the applications are designed to work together to provide cohesive protection.
There are many good internet security suites on the market today. My recommendation is to stick with a well known company that has been in the internet security business a long time. Some products to consider are McAfee Internet Security Suite, Kaspersky Internet Security, Norton Internet Security, Computer Associates eTrust Internet Security, Zone Alarm Internet Security, and F-Secure Internet Security. All of these are good products, and all will do a good job of protecting you online. Many (such as Kaspersky) you can try before you buy.
It doesnt really matter which security software you choose, as long as you use something!
Share this:
