Sign in / up

How credential phishing is changing

How to stop It

Published September 2016

You have just received a Google Drive notification that your colleague shared a document with you. After you log in, you realise that the message was not from your colleague. Unfortunately, you are the victim of a credential phishing scam and it is too late— you have already handed over your password, and your confidential documents may be auctioned or leaked.

In a costlier scenario, you received an email containing details of an invoice or payment issue, or some administrative banking detail. Clicking on the link or attached document conveniently takes you to the bank login screen. Unfortunately, this is a well-crafted website impersonating the bank, and the attackers could now use your credentials to quickly execute multiple funds transfers.