Account & Security

Social Engineering

Social engineering is a type of attack that exploits human behavior to trick people into giving away sensitive information, such as usernames, passwords, or other personal data. Rather than breaking into a computer system, attackers manipulate users into unknowingly handing over the information they want. One of the most common forms of social engineering is phishing.

Phishing

Phishing is a type of cyberattack in which an attacker pretends to be a trusted person or organization to trick you into taking an action.

Some of the most common goals of a phishing attack include:

• Entering your login credentials or other sensitive information.
• Clicking a fake link that leads to a fraudulent website or installs malware on your device.
• Sharing personal information, such as financial information, Social Security numbers, or answers to common security questions.
• Sending money or purchasing gift cards.

Some phishing attempts are broad and impersonate well-known companies such as Amazon, Netflix, or Google. Others are much more targeted, posing as Highlands College, your insurance provider, your bank, or even a friend or family member.

These targeted attacks are often possible because your information was exposed in a previous data breach. Attackers use that stolen information to make their messages appear more convincing and increase the chances that you'll trust them.

Phishing attempts have become much more sophisticated in recent years, making them harder to recognize. Fortunately, there are still several ways to identify phishing attempts and protect yourself.