akashgoswami_’s avatarakashgoswami_’s Twitter Archive—№ 3,715

  1. 1/ #HappyHalloween folks 🎃 Enjoy this photo of my dog dressed up as a phishing email. On that note - Phishing attacks are scary! 🎣 Here's a thread about phishing attacks how you can spot them 👀 Grab a cup of coffee/tea and get cosy because this is worth a read ☕
    oh my god twitter doesn’t include alt text from images in their API
    1. …in reply to @akashgoswami_
      2/ First of all. What is 'phishing'? It's a way of tricking people into handing over information like their personal information, banking details (login credentials, cards details & account numbers) and/or their passwords
      1. …in reply to @akashgoswami_
        3/ So what do they do with this information? They might do is to try and log into your accounts with these details they obtain. If they can gain access to your email account then they can use it to reset your passwords to your other accounts linked to it
        1. …in reply to @akashgoswami_
          4/ The clear problem with this is that they can access all your accounts! They could spend your all money via your Amazon/PayPal/bank account, post things on your social media (throwback to the Twitter hack) or just delete a lot of important stuff (or hold it hostage)
          1. …in reply to @akashgoswami_
            5/ Phishing can happen in a few forms - the most common one is via email. We use our email addresses across a number of services online, so it's entirely possible that a criminal has managed to get a hold of yours somewhere
            1. …in reply to @akashgoswami_
              6/ They'll prompt you to click a link or button that takes you to a web form to collect your details. Take this Netflix one for example - The button here will take you to a page asking you for your Netflix login details and then your card details to update your billing settings
              oh my god twitter doesn’t include alt text from images in their API
              1. …in reply to @akashgoswami_
                7/ If Netflix was really going to contact you about an issue regarding your account, surely they would address the email to you instead of 'Dears Customer' - There's also sometimes a number of spelling mistakes in these emails
                1. …in reply to @akashgoswami_
                  8/ Check the actual email address an email is from. Sometimes your email app/client will hide this and only show you the senders name but you can usually tap that and then view the email address the message is from. Here's what looks like for legit emails from Morning Brew
                  oh my god twitter doesn’t include alt text from images in their API
                  1. …in reply to @akashgoswami_
                    9/ The next thing to check is for links in the email - If there's a link in the email, don't click it! You can hover over a link or button to see what the real link is. On mobile devices, you can hold the tap copy web link and have a look at it in more detail without opening it
                    oh my god twitter doesn’t include alt text from images in their API
                    1. …in reply to @akashgoswami_
                      10/ A common version of this scam is getting an email from someone more senior in the company you work for who needs you to complete an urgent task/action. Here are some things you can keep an eye out for 👇
                      oh my god twitter doesn’t include alt text from images in their API
                      1. …in reply to @akashgoswami_
                        11/ There's a number of other types of these phishing emails you could receive pretending to be from PayPal, HMRC or even one of your utility providers (or worst TV Licensing) dailyrecord.co.uk/lifestyle/money/tv-licensing-email-scams-rise-22045399
                        1. …in reply to @akashgoswami_
                          12/ Sometimes you'll also get messages like this via text messages, pretending to be from a utility provider, HMRC or the government claiming that they have a refund for you. The principle is the same - They want you to tap the link in the message monzo.com/blog/o2-text-scam
                          1. …in reply to @akashgoswami_
                            13/ Sometimes phishing for your details is only the first part of the scam! Using these details they could try and contact you claiming to be your bank telling you to move your money to a safe account or to share a code sent to you via a text
                            1. …in reply to @akashgoswami_
                              14/ Remember that banks never ask you to move money to another account and never to share a code like this or approve a transaction from your banking application because someone tells you to do so 🚩
                              1. …in reply to @akashgoswami_
                                15/ A colleague of mine wrote a great blog post on what to look out for to spot a phishing scam including how scammers use confusing domain names and clone entire websites to make it look like the real thing monzo.com/blog/behind-the-scenes-of-a-phishing-scam
                                1. …in reply to @akashgoswami_
                                  16/ If you are not sure if a message you received from a company is legitimate - Contact them directly via their public number on their website or via their webchat. They'll be able to help you avoid such scams and confirm if they did send you a message
                                  1. …in reply to @akashgoswami_
                                    17/ To summarise be careful of messages asking you to click links and fill in the information or to log in a website with your details. You might not realise it but you likely have a lot to lose. Here's an example of the damage a hacker can cause 👇 wired.com/2012/08/apple-amazon-mat-honan-hacking/
                                    1. …in reply to @akashgoswami_
                                      18/ Probably should have added this as well. If you get emails like this, mark them as spam. Some companies also ask you to forward them to a specific email so they can investigate these further for you 🔎