With the continual increase in phishing attacks this year, attacks in the third quarter exceed the Q2 by 27.5 percent, a new report found.
During the third quarter, where there were over 137 million attempts, the financial segment was hit hard with more than a third of all the phishing attacks aimed at banks, payment systems and e-commerce organizations. This activity also proves further development of a trend Kaspersky Lab experts found in Q2, in which the figure was over 20 percent.
The country with the highest percentage of users attacked in Q3 was Guatemala with almost 19 percent, surpassing the leader of a previous quarter – Brazil. This country saw the second highest percentage of users attacked with 18.6 percent. The third place was taken by Spain, with 17.5 percent of users subjected to phishing attacks.
“We’ve been witnessing a rise in the number of phishing attempts for a while now,” said Nadezhda Demidova, security researcher at Kaspersky Lab. “Many factors influence such growth, like fraudsters’ ability to keep coming up with new schemes and tricks. They also borrow the ideas from foreign ‘colleagues’ to use on local markets as a means of communication, which further helps their technologies develop. For example, in Q3 they actively directed users to the fraudulent website with transmitters and scam-notifications, as well as by exploiting the new iPhone release as a news hook. As new technological and informational updates appear, phishers begin to exploit them.”
Users can take the following measures to protect themselves from phishing:
• Always check the link address and if the sender’s email is genuine before clicking anything. Even more, do not click the link, but type it into the browser’s address line instead to be sure the name of link in the message doesn’t cover another hyperlink.
• If you are not sure the website/sender is real and safe, do not enter your credentials, and if you think you may have entered your login and password on a fake page, immediately change your password.
• Only use a secure connection – especially when you visit sensitive websites. In addition, do not use unknown or public Wi-Fi without password protection.
• For maximum protection, use VPN solutions that encrypt your traffic. If you are using an insecure connection, cybercriminals can unnoticeably redirect you to phishing pages.
• Use a proper security solution with behavior-based anti-phishing technologies, which will warn you and protect you if you are attempting to visit a phishing web page.
Click here for more information on the survey.