Phishing is one of the most common methods used by cybercriminals to defraud and steal sensitive information such as bank details, account passwords or credit card information.
The scammer uses social engineering techniques to pose as a reliable and trusted source in an apparently official electronic communication.
Email Phishing: Malicious content delivered via email.
Smishing: SMS/MMS text messages to a mobile phone.
Vishing: Fraudulent voice phone calls.
Geolocation phishing is a technique used to allow or deny access to the fake website to users from a specific country via an IP address or proxy server. Any unauthorized access from another part of the world will not be able to access the phishing page. The goal is to make these attacks more effective, making them more likely to reach users of the original site.
CERT Bulgaria recommends that you observe the following rules in order not to be deceived:
1. Check the source of your incoming emails:
✓ Your bank will never ask you to send them your passwords, bank card details or personal details by post;
✓ Do not answer questions related to passwords and bank card details;
✓ If you have any doubts, call your bank directly for clarification;
✓ Never enter your bank's website via the link in the email, but type it manually in your browser.
2. Install an antivirus program and make sure you are using the latest versions of all programs and the operating system.
3. Enter your confidential details only on secure websites. Note that they start with https:// and that they appear with a small locked padlock icon.
4. Periodically review your bank accounts to be aware of any irregularities in your transactions.
5. Фишингът НЕ е свързан само с онлайн банкиране. Използват се методи за кражба на лични данни за: eBay, Facebook, Instagram, X (Twitter), PayPal и т.н.
6. Phishing knows no borders and attacks can reach you in all languages. They are usually poorly written or translated, so this can be another indicator that something is wrong.