Thursday, November 24, 2011

Beware of Phishing Emails

First let us understand the meaning of "Phishing" or "Phish".
Phishing means stealing passwords and personal information on the Internet.
"To Phish" is to set up a phony URL (Web Site) or to imitate or to impersonate one original site which people sign in to by giving their passwords or credit card details.

Phishing emails are fake emails, presumably from your friends, indicating a financial problem and requires help or giving you instructions as to how to pass the money (or send the money) over.

To give you one possible example, let's say your computer and/or your friends' computers are infected with "malware". They have "fish" out your "contact list" or address book and even know some of the email passwords. Now what the scammer will do is first to "create" one NEW email account, very similar or close to your best friends (whom they think are most likely have financial trouble).  Don't forget this scammer can read and monitor all your networking emails.

What the scammer has done is setting up an email account, very similar to one of your friends, say, your friend's email address is "geokcheng396", the scammer will create one as "geokcheing396" and with the same service provider. If not careful, when you respond, you will fall into his trap, as like all of us, we usually click "REPLY" to reply the email of our friends without even checking who we are talking to.

How to reduce the risk of getting into trouble when using the Internet to network?

1) When you receive a Phishing Email involving one of your friends, pick up your phone and contact her. Is it true you sent out this email.
2) For sensitive emails relating to confidential information or financial matters, do check who you are "replying" or talking to. Do not just click the "Reply" button. Also, do check carefully the email address. It may not be your friend's.
3) When transmitting money, don't just believe what is said in the email instructions - even though they may be from the right person. Pick up the phone to "re-confirm" the instructions given.
4) Evaluate the minimum risk involved in transmitting money through the bank. You have the bank TT and the Bank Draft. Doing it yourself through your own computer, online, may not be the best option available.
5) For you and/or your friends, try not to use those free and public email accounts to discuss and give instructions on confidential and financial matters. Use PacNet, SingNet, StarHub and the like for better traceability in event of a problem.

No comments:

Post a Comment