Phishing takes place when a fraudster tricks an individual into sharing sensitive information (account numbers, Social Security numbers, login credentials, etc.) by way of fraudulent emails, texts, or counterfeit websites. Phishing can also enable a scammer to gain access to a computer or network so that they can install malware, such as
ransomware, on a victim's computer. Phishers are able to achieve this by spoofing the familiar, trusted logos of established, legitimate companies. Or, they may pose as a friend or family member and are often successful in completely deluding their targets.
Some Current Phishing Threats
- Stealth Mango (Android) and Tangelo (iOS), discovered by Lookout Security Intelligence, are surveillanceware tools that target government officials, diplomats, activists and military personnel, specifically in Pakistan, Afghanistan, Iraq, India and the UAE. According to Lookout Security, “data from U.S., Australian, and German officials and military have been swept up in the campaign we believe is being run by members in the Pakistani military.”
- Fake eFax email deceives email recipients by telling them they have received ‘a new eFax’ and that they need to click on a link button in the email to retrieve the document. The link goes to a phishing page. This is not a new attack, but has recently been spotted in emails again.
- Email filtering company, Mailguard, has picked up a fake E-Toll notification containing an infected .doc file. According to Mailguard, the file contains a malicious macro that will download malware to the victim’s computer. The notification also includes the logos of Microsoft Office and Mailguard in order to appear authentic. It even goes as far as to claim that, “this document is protected by MailGuard".
...
....
.......
