One Step Ahead: I Ordered What? Don’t Get Phished

Another tip in a series provided by the Offices of Information Security, Information Systems & Computing and Audit, Compliance & Privacy

Deceptive phishing, in which attackers impersonate legitimate companies to obtain your personal or financial information, often relies upon creating a false sense of urgency to pressure victims into responding quickly—and against their better judgment. A scam that has become increasingly widespread in recent months illustrates how this pressure is applied. 

Victims receive an official-looking email regarding the auto-renewal of a well-known anti-virus product, including convincing details such as a company logo, or the full name of the email recipient. The fraudulent email states that the recipient will soon be, or has already been, charged hundreds of dollars to their credit card for the next annual cycle of anti-virus protection. A telephone number is provided if the email recipient wishes to dispute or reverse the financial charges.

When the victim calls the bogus telephone number provided, a scammer will answer and pretend to assist the victim, all while obtaining sensitive details such as credit card information.

Keep your guard up to avoid being taken in by phishing emails, which can often be characterized by:

• Email…