2. Phishing

One type of social attack important enough to be given its own name is "phishing".

Phishing involves sending out e-mails, instant messages, or even phone calls pretending to be someone in authority, like a bank officer or a fake computer technician phone call, "Sir, we have noticed unusual online activity from your computer, can you .... etc".

The attacker uses their apparent authority to convince users to voluntarily give up sensitive information such as identity information, bank account details, etc., or to download harmful software by visiting a site they have asked you to go to "To fix the problem".

Phishing emails can be very convincing. They copy the look and branding of the original website to make them appear genuine.

Below is a real example of a phishing email received here in the Teach-ICT office: