What is phishing, and how can you recognize and avoid it?

• A. Fraudulent attempt to obtain sensitive info; recognize by suspicious emails, URLs, and verify sender.
• B. A method of secure file transfer.
• C. A type of malware.
• D. A network protocol for email.

Answer: (A)

Phishing is a fraudulent attempt to obtain sensitive information by pretending to be a trustworthy entity, typically sent through email, text, or instant messages. You recognize it when messages urge you to act quickly, come from an address that doesn’t match the real organization, or ask for passwords, credit card numbers, or other private data. Other red flags include suspicious or unexpected attachments, links that don’t match the legitimate site, vague or generic greetings, and poor spelling or grammar.

To avoid falling for it, don’t click links or open attachments in unsolicited messages. If you’re unsure, go directly to the company’s official site or contact them using a known, separate method to verify the request. Hover over links to check the actual URL before clicking, and never enter credentials on a site reached from a suspicious message. Use two-factor authentication when available, keep your software up to date, and use security tools that flag phishing attempts. If you suspect a message is phishing, report it to the organization or IT department.