“We needed to find solutions to a variety of issues whilst being a complex business, operating in a 24/7 environment. Stripe OLT listened and understood immediately the challenges we faced.”

IT Operations Manager

Simon Darley

Trusted by industry leaders

Schedule your discovery call.

To begin, tell our experts about yourself

By continuing, you agree to our Terms & Privacy Policy

How to Spot a Phishing Email

In a nutshell:

Want to know what characteristics to look out for in a phishing e-mail? Our handy guide is here to help.

More than two thirds of data breaches involve phishing

What exactly is Phishing?

For those of you who might be unclear about the definition, it is the form of fraud in which an attacker impersonates a reputable person or company, usually through a scam e-mail or another form of communication. This can be done in a variety of ways, some of which include distributing malicious links or gaining user credentials and account information – hence the name phishing. Phishing is popular with cyber-criminals as it relies heavily on human error, something much easier to crack than computer code.

In an attempt to raise further awareness about phishing and to provide insight into what you and your employees should be looking out for, we thought we would take you through a real example of a phishing email received and spotted by one of our staff…

This phishing email was a particularly good fake, however there are still red flags that give away its lack of authenticity. Take a look at the email below, and we’ll explain why…

1) Always check the sender. This sender address does not appear to mimic a legitimate TV licensing email address. Always make sure you check the actual email address rather than just the sender name – if the sender address is still unfamiliar to you, always take a few extra minutes to examine the content of the email.

2) Do not be fooled by a ‘Protected’ or ‘Scanned for Malware’ message trying to lull you into a false sense of security… Is the web address correct?

3) Similarly, do not be fooled by official looking logo’s and images. Many cyber-criminals will use ‘scraped’ logos from a company in order to make their emails look legitimate.

4) Notice how this scam email is addressed to the ‘Customer’ rather than including any personal details? Likely because it is part of a generic email campaign sent to thousands of recipients… However, it is important to remember that using your name does not equal legitimacy – rather it’s more likely to be part of a spear phishing campaign sent to targeted individuals.

5) Spelling errors, poor grammar and low-quality graphics are often a key giveaway that you have received a phishing email… This example is nearly flawless, however in the larger bodies of text you can spot unprofessional and informal use of language that would be unlikely to be included in an official email.

6) Finally, do not click on any of the links included in a suspicious email. Notice how this email is littered with links for you to click such as ‘Sign in’, ‘Renew now’ and links to apparent social media pages? If clicked, these may take you to a criminal or malicious website… If you’re in doubt, you can hover your mouse over the hyperlink to see the full URL.


Key Takeaways

INSIGHTS

  • 12 Tips for a Cyber Safe Christmas

  • The importance of back up and DR

  • New Year, New Security-first Culture

  • Benefits of outsourcing your Managed SOC