As we discussed in our recent article, phishing scams reportedly continue to be some of the most disruptive forms of cyber security issues for businesses in the UK and worldwide. In 2023 61% of UK businesses reported the most disruptive cyber security breach was caused by staff receiving fraudulent emails or using fraudulent websites. At Intrasource, we understand the importance of safeguarding your digital assets. As a leading provider of IT security / support, and IT consultancy, we are committed to helping you stay protected. Here’s how you can spot and avoid phishing scams.

What is Phishing?

Phishing is a type of cybercrime where attackers impersonate legitimate organisations to steal sensitive information such as usernames, passwords and credit card details. Often these scams use emails, text messages and even phone calls which appear to be from trusted sources. Scammers often update their tactics to keep up with the latest news, trends and software.

How to Spot Phishing Scams?

1. Understanding phishing scams – the best way to a spot phishing scam is to first understand the purpose of a phishing scam – a phishing email or message generally is sent with the objective of making the recipient perform a nefarious task e.g logging in, providing information, or other sensitive information.
2. Poor formatting or grammar – often phishing emails don’t look quite as professional or well designed as your usual email from a service provider. Look out for common mistakes, such as poorly formatted emails, and even grammatical / spelling mistakes. It’s worth noting with the rise of AI this may gradually become less common.
3. Urgent language – phishing emails often try to create a sense of urgency, asking you to act quickly to avoid negative consequences. The idea is to rush the user into action before they’ve had chance to properly check the email for flaws / issues.
4. Too good to be true – if an email or message is providing an offer in exchange for an action which sounds too good to be true, it can often indicate a phishing attempt.
5. Abnormal requests – legitimate companies and services will never ask for sensitive information, such as login credentials or payment information, via email. If in doubt, avoid clicking any links in a message and go to the source manually in your browser / app.

How to Avoid & Protect Yourself from Phishing Attacks?

1. Avoid clicking on any links – the number one rule of avoiding phishing scams is to avoid clicking on any potentially suspicious links within an email or message. Either contact the company directly, or visit their website / application yourself and login, then look for any sign of the issue mentioned in the email.
2. Verify the source – if in doubt, reach out to the service provider or company directly and ask if the email is legitimate. You can also check the email sender address, however this can be spoofed. Ignore text messages requesting information or providing links which come from random unknown phone numbers.
3. Use Multi-Factor Authentication (MFA) – most account based platforms these days offer MFA support, by requiring two or more credentials to log into your account, e.g password + authenticator app or SMS code.
4. Keep your software up to date – ensure your mobile devices and computers all use the latest software. These software updates can often provide critical protection against security threats.
5. Use good quality security software – there are many pieces of great security software for both desktops and mobile devices, which can help to keep your devices secure and detect phishing scams before you even see them.

How could AI influence Phishing Scams?

With the rise of Artificial Intelligence (AI), we could be on the cusp of the ‘golden age’ of phishing scams, whereby scammers can leverage AI-powered large language models (LLMs), such as ChatGPT and Claude, to automate various elements of the process. By using generative AI scammers can now send phishing emails without any language barrier, alongside providing the capability to produce authentic-sounding content at an unprecedented scale & speed.

That said, there is potential that AI can be used for good to counter these scams – instead leveraging the power of AI to sift through emails and text messages, accurately identifying phishing scams before they even reach the user. In some cases, even detecting suspicious content and providing recommendations for responding to these phishing scams.

Intrasource: Your Partner in Cybersecurity

At Intrasource, we offer comprehensive IT support and consultancy services to help protect your business from cyber threats. Our team of experts can assist with setting up secure systems, providing employee training, and implementing advanced security measures. Whether you need help with cloud phone systems, mobile solutions, or general IT support, we are here to ensure your business operates safely and efficiently.

Stay vigilant and protect your digital assets with Intrasource. For more information explore our range of cyber security services, or contact us at 01482 628800.