How To Catch A Phish

​Everyone gets them, and there’s no stopping them. There are tools available to try to filter most of them, and for the most part, they work, but inevitably things will get through and the last line of defense is you. Over the years our clients have called us about all sorts of interesting scams they’ve gotten in their email, and like all other technology, the latest ones are more sophisticated than ever. Here are some do and do nots to help make sure you don’t fall for one of these scam emails:
-Check the From field in the email to make sure the sender’s address matches who they portray themselves to be. If it looks like an email from your bank, but the ‘From’ address is anything but @yourbanksname.com be very suspicious.
-Check for double extension scams: safe2open.txt is probably fine, but safe2open.txt.exe is probably not.
-Notify your IT department if you’re not sure, or think you clicked on something you shouldn’t have immediately.
-Pay attention to what comes right before the .com/.net as these are often the pieces that matter most. Things can come before it and be legitimate e.g. support.example.com, but if you see support.example.definatelynotascam.com, you’re no longer looking at the same domain.

DO NOT:
-Open any executable files from links you are sent or if they’re attached directly to the email. If you see .exe or .bat, these are not things you want to open.Click links in your email without hovering over the link first and looking at the bottom left of your screen to see where it’s sending you.
-Click links in your email without hovering over the link first and looking at the bottom left of your screen to see where it’s sending you. If it’s not sending you where you thought, don’t click it.
-Respond or reply in any way. Just send it to your IT department or delete it.
-Follow unsubscribe links. It’s better to just mark it as spam than click a potentially harmful link.

The reality in today’s technological world is we can’t 100% rely on technology to protect us online, the real answer is making sure we’re aware of where we are and what we’re doing. If you’d like to learn more about how we can help you make sure your employees are safe online fill out the contact form on our site and we’ll be happy to send you some of our free tools for helping with this.

Leave a Comment

Your email address will not be published. Required fields are marked *