Leveraging AI tools such as ChatGPT, hackers are getting more creative in crafting their cyberattacks. One of their favorite tactics is phishing, in which they target users directly through email, text or direct messages. By using a believable email address, an attacker aims to trick their target into trusting them enough to divulge personal data, such as login credentials, credit card numbers or financial account info.
While email phishing is a popular, there are other types of phishing attacks that threat actors deploy. Here are a few to keep on your radar:
-
Spear Phishing
Spear phishing involves targeting a specific individual in an organization to try to steal their login credentials. For example, they could target your client’s CFO who has ultimate control over all their organization’s financial data. The attacker often first gathers information about the person before starting the attack, such as their name, position and contact details to draft an email that sounds believable.
- Vishing (Video Phishing)
Hackers like vishing attacks because they are easier to deploy than an in-person scam. Vishing occurs when a victim receives a phone call from a hacker, on their landline, mobile phone or even a Voice over Internet Protocol (VoIP) system, asking them to divulge personal information. For example, the caller may pose as a bank representative, and tell the victim that they need their credit card information in order to investigate some unusual charges on it.
- HTTPS Phishing
In an HTTPS phishing attack, hackers send their target an email with a link to a fake website. The site may then be used to fool their target into entering their private information. For example, the target might receive an email from what looks to be a trusted online retailer, asking them to log into their account and confirm their payment method prior to having their order shipped.
Understanding the different types of phishing attacks empowers you to deploy targeted security strategies to thwart them. Learn more about the various types of phishing attacks by downloading our Phishing Education Guide.