Phishing is one of the oldest ways of cyberattacks, which is when someone pretends to be someone else and tries to trick the victim into submitting personal data information. Phishing attack techniques comes in various forms, this includes text messages, emails, social media profiles, posts or fake websites.
Usually, fraudsters (also known as Yahoo Boys in Nigeria) will send messages as if they are from a reputable company or pretend to be someone you know so that you give a password or credit card number.
Quoted from a Facebook press release, here are some common phishing tactics so you can avoid fraud”
Some common phishing tactics
1. Low prices in a limited time
Attractive discount offers potentially contain links to fake online retailers. If clicked, you are directed to a fake website or made to download malware that steals information.
The phishing message asks you to immediately provide personal data such as passwords and credit card numbers.
2. I really need your help!
Someone might claim to be one of your relatives or friends and declared he was in trouble and needed funds.
When you reply to the message, fraudsters will take advantage of your kindness and seduce you into sending money or provide personal data.
3. You are very charming!
Someone sends you a romantic message in hopes of gaining your trust. But beware, the end of the tactic is to get you to send them money.
4. Congratulation. You win!
A message like that claims that you have won the lottery, but there is always a fishing rod in it. To get the ‘prize’, you have to pay a membership fee or share personal data.
Like other phishing messages, the message often contains words and grammatical errors. If you look further, the message also has fake links, such as web links that contain company or brand names. However, there is an error in spelling.
5. Your account has been hacked, but we can help you
The tactic claims that one of your online accounts has been compromised or deleted. Message senders can help provided you have to provide personal data.
In order not to get caught up in phishing scams, remember to save login data for yourself. Don’t share it with others.
Also, don’t try to accept friend requests from strangers on social media. These same unknown people could be those fraudsters who make fake accounts.
Don’t forget to change passwords or passwords regularly, then review account activity and delete spam on social media. Check login history. If something is suspicious, check the installed application that has access to your data. Remove applications that are not used.