Name: Information Security Awarenes
Uploaded: 2023-04-03
Duration: 7 min 26 s
Description: Today we are going to talk about Information security awareness on Phishing, and its impact on Flatworld Solutions Philippines security. Phishing is a type of cyber attack where an attacker sends an email or message that appears to be from a trusted source but is actually designed to trick you into giving away sensitive information or downloading malicious software..

[Audio] Today we are going to talk about Information security awareness on Phishing, and its impact on Flatworld Solutions Philippines security. Phishing is a type of cyber attack where an attacker sends an email or message that appears to be from a trusted source but is actually designed to trick you into giving away sensitive information or downloading malicious software.. 

Scene 1

Flatworld  Solutions (Philippines) Inc. | ISMG | ISMS | Internal

[Audio] You can identify phishing, when Scammers fool you to think they are someone you trust in order to make you do something.. 

Scene 2

When Scammers  fool you  to think they are someone you trust in order to make you  do something .

[Audio] There are 7 Types of Phishing Scams that you Should be aware of.. 

Scene 3

7 Types   of Phishing Scams You  Should Know About

[Audio] Email Phishing Scams Email phishing May look like an email from your office, bank, Paypal, Google, Amazon,or even your CEO.. 

Scene 4

It may look like an email from your bank, Paypal, Google, Amazon, or even your CEO.

Su mity I ACCOM't
O Sign-in anernpt was blocked tor your linked Account
is
nags.
bio,' link of

[Audio] Spear Phishing Scams Spear phishing is when they target you specifically. They have researched you, they know your family members, where you work, and who is your boss. The chances of fooling you are higher.. 

Scene 5

ACCOunt payroll qtæstion
Subject line:
Sense familiarity
Sender Name & Email:
Sender is uusted
genetic Gmail instead of
email.
Greeti n g:
Stans a to
build
phishing is sent or
iS requested.
Correct Job Title
Contact correct
job title. Spearphish
attackers do
to Jook leg*

This is when they target you specifically. They have researched you, they know your family members, where you work, and who is your boss. The chances of fooling you are higher.

ACCO t payro II
Subject line:
Sense Of farniliarity
Sender Name Email:
Sender Nune is trusted
name in Contacts. Email iS
generic Gmail of
Correct Job Title
Con tact name has correct
job title. Spearphish
attackers do their
homework to 100k as legit
as possible.
Sta a to
build trust before a
phishing is

[Audio] Smishing
These are text message phishing scams. Criminals know people respond to text and instant messages faster than email.. 

Scene 6

These are text message phishing scams. Criminals know people respond to text and instant messages faster than email.

"NY TEETH
CHILDREN'S DENTISTRY
O
Dear user.
O
We have detected access to
Yow
limited
identity. Click link
h ttPS Wti .offi ce
o

[Audio] Google search scams
You may be surprised, but some of the top search results in Google are phishing links. Scammers also invest in search engine optimization and work hard to rank their scam sites in the top search results.. 

Scene 7

You may be surprised, but some of the top search results in Google are phishing links.    Scammers also invest in search engine optimization and work hard to rank their scam sites in the top search results.

Search Result Shows Brand Title displays correct brand name

URL Mismatch Title says Venmo but URL is a generic  sites.google.com

2nd Result for Organic Search Even top search results can be manipulated for fake sites

braye
O - Shæe
sign Venmo Login •
Google Sites O
2nd result
is Phishing!!!

[Audio] Social Media Scams
Social media is full of fake accounts.
It could also be a fake account with the same name and photo as one of your real friends that will later try to scam you.. 

Scene 8

Social media is full of fake accounts. It could also be a fake account with the same name and photo as one of your real friends that will later try to scam you.

[Audio] QR Code Scams
Who thought a QR code could be dangerous?
They are everywhere, especially in restaurants. Criminals can place their own sticker over the legitimate one. So that when you scan it, you will be redirected to a fake site.. 

Scene 9

Who thought a QR code could be dangerous? They are everywhere, especially in restaurants.  Criminals can place their own sticker over the legitimate one. So that when you scan it, you will be redirected to a fake site.

Free Pizzu
Scan This For you, coupon'
Real URL
Adds legitimacy to ad
QRCode
Hides actual URL that
directs to a fake site

[Audio] Vishing Scams
Vishing (voice phishing) is a type of phishing attack made over the telephone. Scammers can spoof a phone number that looks identical to a known number, like your bank.. 

Scene 10

Vishing (voice phishing) is a type of phishing attack made over the telephone.  Scammers can spoof a phone number that looks identical to a known number, like your bank.

Trusted Brands Numbers for personal and commercial contacts can be spoofed.

[Audio] What Helps Protect You From Phishing Attacks?
If it's urgent, don't let the emotions cloud your judgment.
Call and verify! Verify that you are talking to the correct person.
Check the address. Always check the email address and U R L for spelling mistakes.
Enable Multi-Factor Authentication.
Look at the style of the message.
Ask questions.. 

Scene 11

What  Helps Protect   You From Phishing Attacks?

If it’s urgent, don’t let the emotions cloud your judgment Call and verify! - Verify that you are talking to the correct person Check the address  - Always check the email address and URL for spelling mistakes Enable Multi-Factor Authentication Look at the style of the message Ask questions

[Audio] You may refer from the table on How long will it take to crack your password?
Passwords include - Lowercase, Uppercase and Numbers. 

Scene 12

7  characters 1  minute 8  characters 1  hour 9  characters 3-4  days 10  characters 7  months 11  characters 40  year 12  characters 2000  years

Passwords include - Lowercase, Uppercase and Numbers

How long  will it take to crack your password

[Audio] How to create a strong Password:
Passwords need to be long.
Use a phrase, Do not provide your personal information like name or birthday.
Don't your reuse passwords.. 

Scene 13

Use a phrase ( NO  personal info like your name or B-Day)

[Audio] HOWEVER, There were 11 BILLION Accounts were stolen from hacked sites and apps. You can check if yours was leaked at haveibeenpawned.com.
So even if you have a STRONG PASSWORD, it may still not be enough.. 

Scene 14

So even if you have a  STRONG PASSWORD , it may still not be enough.

You can check if yours was leaked at  haveibeenpwned.com

604
pwned websites
11,833,420,729
pwned accounts
114,666
pastes
222,848,990
paste accounts

11 BILLION  Accounts were stolen from hacked sites and apps.

[Audio] And that is why, you should enable multi factor authentication.
This will help to protect your account if your password was stolen or leaked in a data breach.. 

Scene 15

This will help to  protect your account  if your password was stolen or leaked in a data breach.

… You should enable  Multi-Factor Authentication

[Audio] What type of Multi-Factor Authentication to use?
Most common is text based (SMS), but it's the least secure.
It's better to use authenticator apps like Google or Microsoft Authenticator.
Or even better yet, use a physical USB key or hard fob from RSA.. 

Scene 16

What type  of Multi-Factor Authentication to use?

It’s better to use authenticator apps like Google or Microsoft Authenticator

Most common is text based (SMS), but it’s the least secure

[Audio] How to avoid getting hacked on public WiFi?
If you have the option to use your mobile data plan, that is better than public WiFi.
Cyber Criminals often setup hotspots with fake Wifi Names, So ask the Barista or Receptionist for the Official WiFi Name.
Enable the Firewall on your device and use a VPN. Try to avoid Free VPN's , as some are owned by criminals.. 

Scene 17

Enable the Firewall on your device and  use a VPN (Try to avoid Free VPN’s - some are owned by criminals)

How to avoid  getting hacked on public WiFi:

Criminals often setup hotspots with fake Wifi Names, so  ask  the Barista or Receptionist for the  Official WiFi Name

If you have the option to  use   your   mobile data plan , that’s better than public WiFi

[Audio] Ransomware is, when criminals hack your computer or network, lock you out, and demand a ransom to let you back in.. 

Scene 18

YOUR PE SO AL FILES
ARETENC!
Make payment o
will be dest
12 Hours
TED
key

When criminals hack your computer or network, lock you out, and demand a ransom to let you back in.

[Audio] How to Avoid Ransomware.
Don't download files from random and untrusted websites.
Beware of phishing emails with attachments.
Don't use your company email or password for personal stuff.
Don't store password in text files or spreadsheets .. 

Scene 19

YOUR PE5S0 AL FILES
ARETEWCf TED
key
Make payment o
will be destro
12 Hours 01.

Beware  of phishing emails with attachments (See phishing section)

Don’t use   your company email or password for personal stuff

Don’t download   files from random and untrusted websites

Don’t store  password in text files or spreadsheets

[Audio] What is Wire Fraud?
It's when you're tricked into wiring money to a fraudulent bank account. For example, an urgent request to wire money from a criminal who impersonates your CEO through hacking your CEO's email account.
They hacked one of your vendors and sent you an invoice with fake bank information.
If you're tricked into wiring money to a fraudulent bank account, the bank may not be there to help you. After all, it's you who transferred the money, not the criminal.. 

Scene 20

If you’re tricked into wiring money to a fraudulent bank account, the bank may not be there to help you. After all, it’s  you who transferred the money , not the criminal.

They hacked one of your vendors and sent you an invoice with fake bank information.

It’s when you’re tricked into wiring money to a fraudulent bank account . For example:

An urgent request to wire money from a criminal who impersonates your  CEO through hacking your CEO’s email account.

[Audio] By following the tips mentioned, you can help protect Flatworld and yourself from the serious threat of phishing attacks. Remember to always be vigilant and cautious when dealing with emails from unknown sources.. 

Scene 21

[Audio] Thank you for your time and attention. If you have any questions or concerns, please don't hesitate to reach out to our Information Security department for further assistance.
Please take time to take and complete the Phishing Assessment found below the Phishing training page.. 

Scene 22

Information Security Awarenes

Today we are going to talk about  Information security awareness on Phishing,

and its impact on Flatworld Solutions Philippines security

Phishing is a type of cyber attack where an attacker sends an email or message that appears to be from a trusted source but is actually designed to trick you into giving away sensitive information or downloading malicious software.

avatar

You can identify phishing, when Scammers fool you to think they are someone you trust in order to make you do something.

There are 7 Types of Phishing Scams that you Should be aware of.

Email phishing May look like an email from your office, bank, Paypal, Google, Amazon,or even your CEO.

slide4-hotlink116

Spear phishing is when they target you specifically

They have researched you, they know your family members, where you work, and who is your boss

Criminals know people respond to text and instant messages faster than email.

You may be surprised, but some of the top search results in Google are phishing links

Scammers also invest in search engine optimization and work hard to rank their scam sites in the top search results.

It could also be a fake account with the same name and photo as one of your real friends that will later try to scam you.

Who thought a QR code could be dangerous?

They are everywhere, especially in restaurants

Criminals can place their own sticker over the legitimate one

So that when you scan it, you will be redirected to a fake site.

Vishing (voice phishing) is a type of phishing attack made over the telephone

Scammers can spoof a phone number that looks identical to a known number, like your bank.

What Helps Protect You From Phishing Attacks?

If it's urgent, don't let the emotions cloud your judgment.

Verify that you are talking to the correct person.

Always check the email address and U R L for spelling mistakes.

You may refer from the table on How long will it take to crack your password?

Use a phrase,  Do not provide your personal information like name or birthday.

HOWEVER, There were 11 BILLION Accounts were stolen from hacked sites and apps

You can check if yours was leaked at haveibeenpawned.com.

So even if you have a STRONG PASSWORD, it may still not be enough.

And that is why, you should enable multi factor authentication.

This will help to protect your account if your password was stolen or leaked in a data breach.

What type of Multi-Factor Authentication to use?

Most common is text based (SMS), but it's the least secure.

It's better to use authenticator apps like Google or Microsoft Authenticator.

Or even better yet, use a physical USB key or hard fob from RSA.

How to avoid getting hacked on public WiFi?

If you have the option to use your mobile data plan, that is better than public WiFi.

Cyber Criminals often setup hotspots with fake Wifi Names, So ask the Barista or Receptionist for the Official WiFi Name.

Enable the Firewall on your device and use a VPN

Try to avoid Free VPN's , as some are owned by criminals.

Ransomware is, when criminals hack your computer or network, lock you out, and demand a ransom to let you back in.

Don't download files from random and untrusted websites.

Beware of phishing emails with attachments.

Don't use your company email or password for personal stuff.

Don't store password in text files or spreadsheets .

It's when you're tricked into wiring money to a fraudulent bank account

For example, an urgent request to wire money from a criminal who impersonates your CEO through hacking your CEO's email account.

If you're tricked into wiring money to a fraudulent bank account, the bank may not be there to help you

After all, it's you who transferred the money, not the criminal.

By following the tips mentioned, you can help protect Flatworld and yourself from the serious threat of phishing attacks

Remember to always be vigilant and cautious when dealing with emails from unknown sources.

If you have any questions or concerns, please don't hesitate to reach out to our Information Security department for further assistance.

Please take time to take and complete the Phishing Assessment found below the Phishing training page.