Search

What is Phishing?

Phishing is a type of online attack in which scammers send emails to random user accounts. These emails appear to be sent from well-known websites or the user's bank, credit card company, email or internet service provider. Personal information such as credit card numbers or passwords are usually requested in order to update accounts. These emails contain a URL link that directs users to a fake or modified website. When users enter this site, they enter their personal information and this information is transmitted to the attackers.

Phishing attacks are usually carried out to obtain a person's password or credit card information. Fake web pages are prepared for places such as banks, social media sites, email services, and online games. These fake sites request users' identity information, card numbers, and passwords. The information of users who respond to the requests in the email message and on the fake site is stolen.

This is a complete scam. The attacker prepares a "bait" and waits for the "fish" to be caught in this bait. Being aware of such frauds can prevent major losses. The purpose of this article is to prevent people using technology from being harmed by creating this awareness.

What is intended to be stolen with phishing attacks?

With phishing attacks, attackers usually aim to access the following information:

. User account numbers

. User passwords and codes

. Credit card numbers

. Internet banking user codes and codes

Phishing via E-Mail

Fraudsters using the e-mail method try to deceive users in various ways:

a) Fake e-mails that appear to be sent from well-known organizations are sent. In these e-mails, the user is told that they need to go to the institution's website and that their password has expired. The user is directed to a fake site prepared by the fraudster and is asked to enter their password there. The fraudster can perform various transactions using this password.

b) In some e-mails, the user is asked to provide their personal information, claiming that a contest has been organized and a prize has been won. This information falls into the hands of the fraudster.

c) The emails ask the user to update their personal information and re-enter all their information.

d) The user is told that their email quota has been reached and that their account will be closed if they do not update their information.

e) Using banks' mobile phone money transfer systems, a fake bank website link is sent to the user and they are asked to update their information.

How to detect phishing emails and fake websites?

. Is the email coming from a well-known e-commerce site, financial institution, email or internet service provider?

. Are you asked to provide your personal information?

. Are there any spelling or grammatical errors in the email or website?

. Does the email or website use emotional or exciting expressions?

. Does the URL of the website you were directed to via a link in the email match the URL of the legitimate company?

What should you do if you are the target of a phishing attack?

. If the attack is related to a legitimate company, report the situation to the relevant company.

. If your email password has been compromised, check your account settings and change your password immediately.

Ways to protect yourself from online scams

. The password you use for your email account should be different from the passwords on your other accounts.

. Do not respond to emails that ask for your personal information.

. If you are not sure who the email is from, ignore it.

. Do not click on URL links in suspicious emails.

. Do not click on shortened URL links (bit.ly, ow.ly, tinyurl.com, etc.).

. Do not provide personal information to websites you do not know.

. When visiting bank, credit card, and service provider websites, type the URL directly into your browser.

. Use antispyware and antivirus programs.

. Do not install or run illegal software.

. Do not send sensitive information such as credit card numbers and passwords by email.

. Avoid banking while using wireless internet.

The most effective way to protect against these attacks is to be conscious and informed about them.