Simple steps to avoid being phished

<h1>Simple steps to avoid being phished</h1>Author: <a title="MFrizzi" href="http://www.articlesbase.com/authors/mfrizzi/275505.htm">MFrizzi</a> Phishing is an increasingly common type of spam that can lead to theft of your personal details such as credit card numbers or online banking passwords. Phishing attacks work by the scam artist sending "spoofed" emails that appear to come from a legitimate website that you have online dealings with such as a bank, credit card company or ISP - any site which requires users to have a personal identity or account. The email may ask you to reply with your account details in order to "update security" or for some other reason. The phishing email may also direct you to a spoofed website or pop-up window which looks exactly like the real site, but has been set up for the sole purpose of stealing personal information. Unsuspecting people are then often fooled into handing over credit card numbers, passwords or other details. According to the Anti-Phishing Working Group, phishers are able to convince up to five per cent of recipients to respond. How to protect yourself: <ul> <li> Never respond to emails that request personal financial information Banks or e-commerce companies generally personalise emails, while phishers do not. Phishers often include false but sensational messages ("urgent - your account details may have been stolen") in order to get an immediate reaction. Reputable companies don't ask their customers for passwords or account details in an email. Even if you think the email may be legitimate, don't respond - contact the company by phone or by visiting their website. Be cautious about opening attachments and downloading files from emails, no matter who they are from. Sophos uses SPF (Sender Policy Framework). This is an anti-forgery solution which involves publishing a list detailing which servers are allowed to send Sophos emails. </li> <li> Visit banks' websites by typing the URL into the address bar Phishers often use links within emails to direct their victims to a spoofed site, usually to a similar address such as mybankonline.com instead of mybank.com. When clicked on, the URL shown in the address bar may look genuine, but there are several ways it can be faked, taking you to the spoofed site. If you suspect an email from your bank or online company is false, do not follow any links embedded within it. </li> <li> Keep a regular check on your accounts Regularly log into your online accounts, and check your statements. If you see any suspicous transactions report them to your bank or credit card provider. </li> <li> Check the website you are visiting is secure Before submitting your bank details or other sensitive information there are a couple of checks you can do to help ensure the site uses encryption to protect your personal data: Check the web address in the address bar. If the website you are visiting is on a secure server it should start with "https://" ("s" for security) rather than the usual "http://". Also look for a lock icon on the browser's status bar. You can check the level of encryption, expressed in bits, by hovering over the icon with your cursor. Note that the fact that the website is using encryption doesn't necessarily mean that the website is legitimate. It only tells you that data is being sent in encrypted form. </li> <li> Be cautious with emails and personal data Most banks have a security page on their website with information on carrying out safe transactions, as well as the usual advice relating to personal data: never let anyone know your PINS or passwords, do not write them down, and do not use the same password for all your online accounts. Avoid opening or replying to spam emails as this will give the sender confirmation they have reached a live address. Use common sense when reading emails. If something seems implausible or too good to be true, then it probably is. </li> <li> Keep your computer secure Some phishing emails or other spam may contain software that can record information on your internet activities (spyware) or open a 'backdoor' to allow hackers access to your computer (Trojans). Installing anti-virus software and keeping it up to date will help detect and disable malicious software, while using anti-spam software will stop phishing emails from reaching you. It is also important, particularly for users with a broadband connection, to install a firewall. This will help keep the information on your computer secure while blocking communication from unwanted sources. Make sure you keep up to date and download the latest security patches for your browser. If you don't have any patches installed, visit your browser's website, for example users of Internet Explorer should go to the Microsoft website. </li> <li> Always report suspicious activity If you receive an email you suspect isn't genuine, forward it to the spoofed organisation (many companies have a dedicated email address for reporting such abuse). </li> <li> Further reading For more information about how consumers and businesses can protect themselves against online fraud read the information published by the British banking industry and advice from the Australian Bankers Association. </li> </ul>About the Author: This article was provided by Sophos and is reproduced here with their full permission. Sophos provides full data protection services including: <A href="http://www.sophos.com">security software</A>, encryption software, <A href="http://www.sophos.com">antivirus</A>, and <A href="http://www.sophos.com/products/malware-protection/">malware</A>.Article Source: <a href="http://www.articlesbase.com/">ArticlesBase.com</a> - <a href="http://www.articlesbase.com/security-articles/simple-steps-to-avoid-being-phished-1447085.html" title="Simple steps to avoid being phished">Simple steps to avoid being phished</a>

Phishing is an increasingly common type of spam that can lead to theft of your personal details such as credit card numbers or online banking passwords.

Phishing attacks work by the scam artist sending "spoofed" emails that appear to come from a legitimate website that you have online dealings with such as a bank, credit card company or ISP - any site which requires users to have a personal identity or account. The email may ask you to reply with your account details in order to "update security" or for some other reason.

The phishing email may also direct you to a spoofed website or pop-up window which looks exactly like the real site, but has been set up for the sole purpose of stealing personal information. Unsuspecting people are then often fooled into handing over credit card numbers, passwords or other details.

According to the Anti-Phishing Working Group, phishers are able to convince up to five per cent of recipients to respond.

How to protect yourself:

Never respond to emails that request personal financial information
Banks or e-commerce companies generally personalise emails, while phishers do not. Phishers often include false but sensational messages ("urgent - your account details may have been stolen") in order to get an immediate reaction. Reputable companies don't ask their customers for passwords or account details in an email. Even if you think the email may be legitimate, don't respond - contact the company by phone or by visiting their website. Be cautious about opening attachments and downloading files from emails, no matter who they are from. Sophos uses SPF (Sender Policy Framework). This is an anti-forgery solution which involves publishing a list detailing which servers are allowed to send Sophos emails.
Visit banks' websites by typing the URL into the address bar
Phishers often use links within emails to direct their victims to a spoofed site, usually to a similar address such as mybankonline.com instead of mybank.com. When clicked on, the URL shown in the address bar may look genuine, but there are several ways it can be faked, taking you to the spoofed site. If you suspect an email from your bank or online company is false, do not follow any links embedded within it.
Keep a regular check on your accounts
Regularly log into your online accounts, and check your statements. If you see any suspicous transactions report them to your bank or credit card provider.
Check the website you are visiting is secure
Before submitting your bank details or other sensitive information there are a couple of checks you can do to help ensure the site uses encryption to protect your personal data:

Check the web address in the address bar. If the website you are visiting is on a secure server it should start with "https://" ("s" for security) rather than the usual "http://".

Also look for a lock icon on the browser's status bar. You can check the level of encryption, expressed in bits, by hovering over the icon with your cursor.

Note that the fact that the website is using encryption doesn't necessarily mean that the website is legitimate. It only tells you that data is being sent in encrypted form.
Be cautious with emails and personal data
Most banks have a security page on their website with information on carrying out safe transactions, as well as the usual advice relating to personal data: never let anyone know your PINS or passwords, do not write them down, and do not use the same password for all your online accounts. Avoid opening or replying to spam emails as this will give the sender confirmation they have reached a live address. Use common sense when reading emails. If something seems implausible or too good to be true, then it probably is.
Keep your computer secure
Some phishing emails or other spam may contain software that can record information on your internet activities (spyware) or open a 'backdoor' to allow hackers access to your computer (Trojans). Installing anti-virus software and keeping it up to date will help detect and disable malicious software, while using anti-spam software will stop phishing emails from reaching you. It is also important, particularly for users with a broadband connection, to install a firewall. This will help keep the information on your computer secure while blocking communication from unwanted sources. Make sure you keep up to date and download the latest security patches for your browser. If you don't have any patches installed, visit your browser's website, for example users of Internet Explorer should go to the Microsoft website.
Always report suspicious activity
If you receive an email you suspect isn't genuine, forward it to the spoofed organisation (many companies have a dedicated email address for reporting such abuse).
Further reading
For more information about how consumers and businesses can protect themselves against online fraud read the information published by the British banking industry and advice from the Australian Bankers Association.

This article was provided by Sophos and is reproduced here with their full permission. Sophos provides full data protection services including: security software, encryption software, antivirus, and malware.

Rate this Article:

0 / 5 stars - 0 vote(s)

Re-Publish

Article Source: http://www.articlesbase.com/security-articles/simple-steps-to-avoid-being-phished-1447085.html

Article Tags: Spam, Data Protection, Antivirus, Spyware, E-marketing, Phishing, Internet Security, Malware, Antispyware, Viruses, Network Access Control, Firewalls, Security Software, Patches, Trojans, Nac, Aes, Site Security, Desktop Security, Encruption

Related Videos
Related Articles
Ask / Related Q&A

Play

Getting to know Google Chrome - #5 - Safer, More Secure Surfing

Play

How to Use IE8's New Security Features

Play

How to Encrypt emails using Voltage Security Network

Play

How to Protect your messaging network with SecureComputing's Secure Mail

Play

iPhone Security Flaw in 2.0.2 with fix

Latest Security Articles
More from MFrizzi

Pass4side 9L0-509 study questions

By: Adela1987 | 26/12/2009
Pass4side Practice Exams for Apple 9L0-509 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.Pass4side Apple 9L0-509 Preparation Diary is my own preparation guide, there is no guarantee you’ll pass the exam, just by reading the article. Keep the article as starting point, do more research, I put enough reference wherever required, so expand your reading with references mentioned. Good Luck.

How to Prevent a Computer Virus and Protect Your Email?

By: Amy Zhou | 25/12/2009
Viruses and other malicious PC threats can easily infect our computer systems. Basing on my personal experience and study from the Internet, I would like to share some tips about how to prevent computer virus and safeguard your email.

Koobface - How to Remove Koobface?

By: Amy Zhou | 25/12/2009
"Koobface" is a kind of worm. With the increasingly large group of social network users, Koobface worm spreads crazily among Facebook users, so people also name it as Facebook worm. However, the name "Facebook worm" will soon be the past, because this worm has leaped out of the fence of Facebook, and madly sprung to other social network.

Computer Virus Removal - How to Remove Computer Virus Manually and Automatically

By: Amy Zhou | 25/12/2009
Do you really know how to remove computer viruses when you are suffered by these terrible unexpected intruders? Actually, as long as you read this article, and learn some basic knowledge about computer virus, you should know several ways to manually or automatically remove them.

How to Remove the Trojan Downloader

By: Amy Zhou | 25/12/2009
The Trojan-Downloader is a kind of Trojan, which once running will generate infection files, modify Registry and add Startup items, in order to make itself run at the computer startup. Use the antispyware program in safe mode to detect and remove Trojan-Downloader, and after which please download the Registry repair tool to repair your system Registry and check the startup items.

Free From Spyware Threats - You Need Real-Time Protection

By: Amy Zhou | 25/12/2009
Many computer users are suffering from the compromising of spyware, virus, Trojan, or other PC threats. To get rid of viruses or Trojans, a security tool should contain not only effective technology in scanning out or detecting malicious threats, but also robust and complete mechanisms in removing threats and infections.

Staying Safe on the Internet

By: Hannah Miller | 25/12/2009
If you are concerned about whether or not you are safe while you are on the Internet, there are a few precautions that you can take. It’s good to know a few basic things about Internet security and what could be a potentially harmful situation. Read more for some information about basic ways to protect yourself while you’re on the Internet.

TCP/IP Exploit Countermeasures

By: Steven James | 23/12/2009
Increasingly, offenders and network intruders are using highly advanced tools and techniques to facilitate their offenses and evade apprehension, inventing new challenges for law enforcement, security professionals and computer forensic examiners. However, a TCP packet is a data structure comprising of a sequence number, an acknowledgement number for connecting the packets of a communication session, flags, source and destination port numbers.

CAN STRONG AUTHENTICATION SORT OUT PHISHING AND FRAUD?

By: MFrizzi | 18/12/2009 | Software
Authentication, especially two-factor authentication, is seen as an important step against on-line crime, especially for on-line banking and Internet shopping. But authentication alone is not enough to protect computer users against the efforts of organized crime to thieve their credentials, their data and even their identity.

Securing websites

By: MFrizzi | 18/12/2009 | Security
This paper discusses some of the common ways that web servers are attacked and details various techniques in which they – and by extension the websites they host – can be protected.

Assessing endpoint security solutions: why detection rates aren’t enough

By: MFrizzi | 18/12/2009 | Communication
Evaluating the performance of competing endpoint security products is a time-consuming and daunting task. Enterprise decision-makers have to rely on independent competitive comparisons, performance benchmarks, and detection certifications, all covering different solutions and criteria, providing conflicting results. This paper highlights the pitfalls of simply looking at virus detection rates and investigates the effect of the rapidly developing IT environment and fast-moving threat landscape on

Effective email policies: Why enforcing proper use is critical to security

By: MFrizzi | 18/12/2009 | Technology
The unmonitored and unguarded use of email by employees poses a multitude of risks to organizations. The distribution of inappropriate or offensive content, malicious emails, and the risks of data leakage all threaten working environments, IT resources and an organization’s reputation. A comprehensive, transparent and enforceable email acceptable use policy (AUP), combined with robust email security solutions, dramatically reduces exposure to these risks. This paper investigates why organization

Applications, virtualization, and devices: Taking back control

By: MFrizzi | 18/12/2009 | Security
Employees installing and using legitimate but unauthorized applications, such as Instant Messaging, VoIP, games, virtualization software, and unapproved browsers are a real and growing threat to business security and productivity. Removable storage media and wireless protocols make the challenge of securing data even more complex. This paper explains why it is important to control unauthorized applications and devices, discusses the different approaches, and highlights how integrating this funct

Securing websites

By: MFrizzi | 15/12/2009 | Security
This paper discusses some of the common ways that web servers are attacked and details various techniques in which they – and by extension the websites they host – can be protected.

Assessing endpoint security solutions: Why detection rates aren’t enough

By: MFrizzi | 15/12/2009 | Security
Evaluating the performance of competing endpoint security products is a time-consuming and daunting task. Enterprise decision-makers have to rely on independent competitive comparisons, performance benchmarks, and detection certifications, all covering different solutions and criteria, providing conflicting results. This paper highlights the pitfalls of simply looking at virus detection rates and investigates the effect of the rapidly developing IT environment and fast-moving threat landscape on