We use cookies to enhance your experience. Basic cookies are essential for the proper working of this website. For example, they save your language preferences. They also help us gather anonymous information about the use of our site. More information in our Cookie Policy.
Phishing and smishing: don't take the bait!
Today, we receive more e-mails and text messages than ever which demand our attention, meaning we are more vulnerable to phishing and smishing attacks. The internet has become a playground for crooks and cybercriminals who are using an increasing number of ever more sophisticated techniques. But what exactly is phishing and smishing?
What is phishing?
Phishing is a form of online fraud which involves making users themselves reveal their confidential and/or sensitive data. In general, this concerns: bank card PIN codes, log-in information relating to various internet services, and telephone numbers.
It is important to distinguish spam and phishing. Phishing is a type of spam, whereas spam is junk e-mails, which may or may not be designed to defraud. So phishing is a fraudulent form of spam in which the e-mail asks you to carry out a particular action, and the action always leads to a scam.
And smishing?
Smishing (a combination of the words SMS and phishing) is the attempt by fraudsters to acquire personal, financial or security information by text message. They act as a trustworthy source, impersonating a bank, card issuer or utility/service provider.
How does it work?
Phishing and smishing, in essence, rely on taking advantage of the naivety of internet users. Cybercriminals therefore have no qualms about using a whole range of weapons designed to snare you.
Learn about the four principles of phishing below:
- Stealing the identity of a trusted organisation, in particular of financial institutions, large companies, government organisations or other well-known institutions.
- Asking for confidential and sensitive information under a false pretext.
- Redirecting the victim to a fake internet site which is virtually identical to the hacked organisation’s official site, so that he/she enters the information requested.
- Using the data gathered to steal the identity of an individual with the intention of gaining advantages or services (money, property, identity or administrative documents).
It should be noted that phishing is not only carried out by sending fraudulent e-mails. Phishing scams can also occur by telephone!
For more information on phishing, please go to the following site:
03/23
-
Simplify your life with the LuxTrust Mobile application!
Since 2021, most banks and public administrations in Luxembourg will only use one authentication device for all their online services: the LuxTrust Mobile application.
-
LuxTrust: digital trust on a national scale
You've probably heard of LuxTrust. Like almost the entire population in Luxembourg and the majority of cross-border commuters, you may already be using it for your online banking or administrative procedures. But do you really know all its features for individuals? A short reminder in the following lines.
-
LuxTrust: beware of telephone scams!
We must remain vigilant and cautious! A new form of scam is currently causing havoc in Luxembourg, and has already been the subject of several complaints to the Grand Ducal police. Individuals posing as LuxTrust employees are attempting to commit phishing attacks by telephone.