Phishing is an umbrella term for scams where cybercriminals trick you into giving away private information. While some scams arrive as generic emails, others are tailored specifically to you, sent over text message, or even spoken over the phone.
This short glossary defines the most common types of scams you are likely to encounter, privately or at work.
Spear phishing
When an attack targets a specific individual, it is known as spear phishing. Fraudsters carefully research the victim to determine which method will work best. These kinds of targeted attacks can be difficult to detect.
Whaling
These are spear-phishing attacks targeting individuals in executive positions.
QR Code Phishing (Quishing)
Fraudsters may send you QR codes via SMS or email, or they might place their own codes over existing ones at restaurants or parking meters.
Vishing
Also known as voice phishing, is a phishing attempt conducted over the phone.
It could be someone calling and pretending to be from “Microsoft Security.” Or, it could be an automated voice asking you to enter information or speak into your phone, call a specific number, or visit a particular website.
Regardless of the scenario, never provide sensitive or personal information over the phone. Phone numbers can easily be spoofed, and you do not know who is listening on the other end.
Smishing
These are phishing attempts via SMS, something most people have encountered. If you receive messages from the police, your bank, or other well-known organisations, always consider the possibility that it could be a scam.
If the messages contain links to websites, do not click on them. And remember: if you are unsure, speak directly to the organisation in question. Find their official contact information via their website, never reply to the messages directly.
Angler phishing
This is a relatively new type of attack in which scammers make contact via social media.
First, the scammers create a fake profile posing as a well-known company, such as Amazon, Cool Blue, or Aldi. They then closely monitor the company’s genuine page.
If you comment on a Facebook post by Amazon complaining that an item you ordered hasn’t arrived yet, the scammers might contact you. They will most likely send you a message offering compensation, provided you follow their instructions.
Some may ask for your email address so they can continue the scam there. Others might ask you to click a link. This link could lead to a website asking you to enter personal details or download a “refund form” containing malware.
If a company contacts you on social media, verify that the profile is genuine. If you encounter a scam attempt, report it to the platform so they can remove the fake profile.
