The number of phishing attacks grew by 27.5% in the third quarter of 2018 compared to the previous quarter and exceeded 137 million attempts to visit fake websites according to Kaspersky Lab's Spam and Phishing report in the third quarter of 2018.
Phishing is often regarded as a misleading type of cyber attack because it is based on techniques social planning and can not go unnoticed. In most cases, the offenders create a copy a home which encourages the victim to enter my login information together with other valuable information or to pay for non-existent services. The consequences of such attacks may vary from loss of money to entire entities where employees have not been sufficiently careful and have provided the offender with authentication information to access the system.
In T3, more than 137,382 million businesses were found to visit phishing sites, more than half of all 2017 numbers. The rapid growth of the phishing attacks will continue in the last quarter of 2018.
Over one third of all phishing attacks targeted banks, payment systems and e-commerce, up to 20% in T2.
S.C.C.O. Sibiu registered two criminal cases during the period 2017-2018 in which investigations were conducted to commit a "computer fraud" offense. Article 249 of the Criminal Code, criminal cases involving companies suffering material damages of $ 14,000 and $ 11,000. In addition, investigations into "cyberattack" crime in three other criminal offenses involving Sibiu county companies decided to transfer different amounts of money (total of $ 110,000), unfinished events that were blocked in a timely manner. The investigation will be carried out under the supervision of the Public Prosecutor's Office in Sibiu court.
In the third quarter, the striker was the largest in Guatemala, almost 19%, exceeding the previous quarter's leader in Brazil, which now ranks second, with a small difference of 18.6%. Spain is third with 17.5% of users targeting phishing attacks.
Kaspersky Lab experts advise users to take multiple steps to protect themselves from phishing, such as checking the link address and sender's email to determine if they are real and using a secure connection. For maximum security, experts recommend installing a VPN solution that encrypts traffic. Security assistants protect in an unprotected connection on the security website.
Sibiu's IPJ Recommendations to Prevent Computer Corruption "Social Engineering"
Social technology has the ability to manipulate or influence other specific actions or to disclose confidential information. This term usually applies to those who use tricks to collect data or access to information systems. Such offenses may concern the misuse of bank transfers by commercial companies in economic relations.
The criminal justice system of these facts involves email accounts used by business operators in the business relationship, correspondence of corporate employees and real-time postimulation with an email address that is similar to a partner company. The end result may distort money transfer to a different bank account than the recipient's account, which is monitored by other members of the criminal group.
Unauthorized compromises can be made with phishing attacks. Criminals send misleading e-mails to victims and cause either access to various connections and enter passwords, or download viruses that infect computer systems and provide offenders with the ability to manage mail.
To prevent such fraud, the police recommend:
· Switching passwords for using regular e-mail accounts for commercial use with two-step authentication;
· Restricting the use of computers to make financial transactions for their use for other purposes (using personal e-mail and social networks), thereby avoiding the risk of malware being infected;
· Creating clear working methods and informing employees of potential risks.
· Telephone confirmation in atypical operations or when transferring to a non-regular bank account;
· Avoid answering e-mails that ask you to change your bank account using the recurring feature and creating a new email requesting confirmation.
· Inform the police as soon as possible if companies are involved in such cases.