Translations:Kyberneticka bezpecnost/19/en

Phishing

This type of fraud that uses e-mail communications to retrieve sensitive user data. Received e-mail then looks as if it came from social networks or payment portals etc. These e-mails usually want user to enter their user name and password.

The attacker throws bait to his victim and waits to see if the victim takes the bait. The most common types of phishing messages are information about a failed payment, a request to update security details, a problem with a user account, email box, bank account or customer satisfaction survey. Attackers most typically target emotions such as fear, trust, authority. The email texts will try to scare you into taking some action as quickly as possible (e.g. enter your login details within 24 hours, otherwise your account will be deactivated).

The messages usually request a username and password or encourage you to log in to a fake website.