Identifying an email phishing attempt and avoid from being a victim!
- Khairil Effendy
- Dec 29, 2021
- 1 min read

Email phishing, often known as "deception phishing," is one of the most well-known attack methods. Malicious actors send emails to consumers imitating a well-known business, then employ social engineering methods to create a false feeling of urgency, leading them to click on a link or download an item. (securityscorecard).

Detection:
How to Detect an Email Phishing Attempt:
- Search for contact information or other valid information regarding the organization being faked, then look for things like misspellings or a sender email address with the incorrect domain. 
- Code that is malicious and codes that is benign: Be on the lookout for anything, including code, that attempts to fool Exchange Online Protection (EOP), such as downloads or URLs with misspellings. 
- Abbreviated links: Avoid clicking on any shortened URLs since they are intended to deceive Secure Email Gateways. 
- Fake brand logo: Check the message for any logos that appear to be legitimate, since they may include harmful HTML elements. 
- Ignore emails with simply an image and very little content since the picture might be containing dangerous malware. 
(securityscorecard)

Action:
- Do not open it. 
- Delete it immediately to prevent yourself from accidentally opening the message in the future. 
- Do not download any attachments accompanying the message. 
- Never click links that appear in the message. 
- Do not reply to the sender. 
- Report it. Help others avoid phishing attempts: 
Want to learn more on how to defend yourself against cyber threats?
Follow our Social Media:
LinkedIn: https://zcu.io/zAgP
Facebook: https://zcu.io/zkT9
Want to protect your organization against such attack❓
Contact us Now❗




Comments