Phishing falls under the category of social engineering and always has been, and will continue to be, the easiest way into most organizations today. Phishing is so dangerous as it usually bypasses all defenses in place and has a low likelihood of detection.
Everyone knows the common indicators as follows:
- The sender is unknown, or you are not expecting an email from the person
- Similar sounding domain names, eBay-secure.com, paypol.com, and so on
- Incentive-based surveys, prizes
- Missing logos, spelling, and/or grammatical mistakes
- Generic greetings
- Links with alternate URLs, such as shorteners (tinyurl, bit.ly, and so on)
There are a number of reasons why they continue to work:
- The human element, sometimes the user knows it looks ...
