Phishing emails are on the rise: Know these trends

It seems that whenever I open my email, there are phishing emails waiting in my inbox. I know I’m not the only one and these are the phishing scams you should watch out for every day.

First, let me say this: phishing emails are getting smarter and easier to miss. They include new and unique disguises and tried-and-true methods for fooling unsuspecting victims of your grandma who just wanted to buy you something nice and send it to businesses big and small.

1 Black Friday/Holiday Spam

It’s that time of year again! Holiday offers are popping up and scammers are taking advantage of this opportunity to flood email inboxes with fraudulent offers that are too good to be true.

And unfortunately, they usually are.

These emails usually mimic legitimate retail promotions from places like Victoria’s Secret, Kohl’s, Walmart, and Amazon. However, once you click on a coupon or follow a link, your information is already captured. It’s even worse when you enter your sensitive information like your phone number or even worse, your credit card details.

To avoid falling victim to these phishing scams, carefully examine promotional emails and verify all links by going to the seller’s official website outside of the email.

2 Phishing via QR codes (Quishing)

QR codes were created for convenience and are very simple to use, but they too have now entered the phishing landscape. Cybercriminals can easily use them to redirect victims to malicious websites – scan them once and boom, your information is gone in a so-called quishing attack.

To stay safe, always check that the QR code is safe to scan. This includes QR codes in the wild, as fraudsters have been known to cover up “legitimate” codes with their own, so look for signs of tampering such as frayed edges or a different appearance.

Few of us expect collaboration tools and platforms like Slack or Teams to be a place for phishing, but attackers are exploiting them to hunt for sensitive information. These attempts may come disguised as urgent requests from your “boss” under a strange name, or unknown references from people pretending to be colleagues.

If you want to avoid these attacks, your best bet is to always remain skeptical of unusual requests. Verify its authenticity through alternative channels if and where you can.

4 Increased use of AI and Deepfakes

Artificial intelligence and deep fakes used to steal your information may seem like the stuff of the future, something you’d see in a sci-fi show. The truth is that artificial intelligence is used to create highly convincing phishing emails, photos and videos.

This sophisticated approach takes advantage of things like emails that look unnaturally polished, or media content that seems slightly… off. Uses gestures that don’t feel “right” or words that make sense but don’t feel natural. Look out for subtle language and media inconsistencies as clues that could give them away as phishing scams.

5 Offer/fundraising/discount scams

During such periods, fake promotions or fundraising appeals are more common, specifically around elections and after major incidents such as recent hurricanes. The common thread between them is that they tap into our emotions or the urgency of the situation. You will see suspicious URLs and requests for payment or sensitive data – telltale signs of fraud. Always confirm the legitimacy of a charity or promotion before getting involved.

6 Tax fraud

Phishing emails masquerading as communications from the IRS or other tax authorities are usually most prevalent around tax season. But what you may not realize, at least if you’re not a business owner, is that business taxes can be paid quarterly. That means fall is the perfect time for business tax scams.

These emails require immediate payment or personal information. It is important that you verify all communications with tax authorities through official websites or direct contact methods.

“”>

With these common and evolving threats in mind, you should turn to anti-phishing protection. This requires a combination of vigilance and proactive measures, including but not limited to:

• Best practices: The first line of defense is to understand the most common phishing scams. Beware of unsolicited emails asking for confidential information under the guise of urgency.
• Cyber ​​security measures: Implement multi-factor authentication, firewalls and phishing filters to protect potential entry points.
• Security software: Use reliable security software that is updated frequently to protect yourself from the latest cyber threats.
• Verification habits: Always cross-check the sender’s email address and contact information. When in doubt, contact them directly using verified channels.
• Information sharing: Be careful when sharing personal or sensitive information on platforms that may be vulnerable to phishing attacks.

Phishing emails are not just spam; are calculated, evolving threats that require constant awareness and adaptation from all involved, especially those they target. Fortunately, by understanding the latest trends and being proactive, you should be able to stay safe even if your inbox is flooded.