Phishing through Social Media
To Click, or Not to Click?
Looks like you've got a friend request from a popular social website! Go ahead and Confirm that request!
Hang on! Let's slow down and think things through. How do you know if this email is legit?
1. Sender
Instead of looking at the name, look at the actual URL. Does this look like it is legitimately from Facebook.com?
Correct: Incorrect: If it were coming from Facebook, then it would be clearly stated as Facebook.com, instead of this fake website.
2. Destination URL
http://faceboke.mrstealyoinfo.net/47583
Hover over the 'Confirm Request' button.
After hovering over the button, does it look like the link will take you to facebook.com?
Correct: Incorrect: This link will take you to what appears to be a malicious website, where someone could get a hold of your sensitive information!
3. Friend Requests
Should you accept friend requests from people you do not personally know?
Correct: Incorrect: You should never accept friend requests from strangers with no way to verify who they are.
4. Curiosity
Often times attackers will try and pique your curiosity to bypass your basic suspicions. Should you ever click through to a social media site within an email?
Correct: Incorrect: While it could be legitimate, log on to your social media account directly. Do not click through an email.
5. Posting Etiquette
Should you post personal information, phone numbers, addresses, specific dates about long leaves of absence from your home? (vacations, business trips, etc.)
Correct: Incorrect: Posting personal information about yourself can place a target on yourself and your home.
5. Posting Etiquette
Strict privacy settings work great, but if you post things like your phone number, address, or about long absences, strict privacy settings won't be enough to protect you.