Phishing

Information stolen from the victims is usually misused to empty their bank accounts or is sold online.

Similar attacks can also be performed via phone calls (vishing) as well as SMS messages (smishing).

Spearphishing

A more advanced phishing method whereby seemingly authentic phishing messages land in the inboxes of specific groups, organizations or even individuals. Authors of spearphishing emails perform detailed research on their target(s) in advance, making it difficult to identify the content as fraudulent.

Attacks focused on specific, mostly high-profile business individuals – such as top managers or owners – are labeled as “whaling”, due to the size of the potential pay-off (the bad guys going after “the big fish”).

1. Generic or informal greetings – If a message lacks personalization (e.g. "Dear Customer") and formality then there is probably something amiss. The same applies to pseudo-personalization using randomized, fake reference numbers 
2. A request for personal information – Frequently used by phishers, usually avoided by banks, financial institutions and most online services
3. Poor grammar – Spelling mistakes, typos and unusual phrasing often indicates a fake (but the absence of any of these is not proof of legitimacy)
4. Unexpected correspondence – Unsolicited contact from a bank or online service provider is highly unusual and thus suspicious
5. A sense of urgency – Phishing messages often try to induce rapid and less-considered action
6. An offer you cannot refuse? – If the message sounds too good to be true, it almost certainly is
7. Suspicious domain – Would a US or German bank really send an email from a Chinese domain?

1. Be aware of new phishing techniques: Follow the media for phishing attack reports, as the attackers might come up with new techniques for luring users into a trap 
2. Don’t give away your personal details: Always be alert if an electronic message from a seemingly trustworthy entity ask for your credentials or other sensitive details. If necessary, verify the contents of the message with the sender or the organization they seemingly represent (using contact details known to be genuine rather than details provided in the message)
3. Think twice before you click: If a suspicious message provides a link or attachment, don’t click or download. Doing so might lead you to a malicious website or infect your device with malware
4. Check your online accounts regularly: Even if you don’t suspect that someone is trying to steal your credentials, check your banking and other online accounts for suspicious activity. Just in case…
5. Use a reliable anti-phishing solution. Apply these techniques and 'Enjoy Safer Technology'