Email Phishing & Online Security Tips
This article covers the following topics:
- What is Email Phishing ?
- What is Email Spoofing ?
- Why update your internet / web browser ?
- Anti Virus information
- Outlook Versions
- Change of Banking Details scam – how to avoid it.
- Articles to Read
What is Email Phishing ?
Email Phishing is a fraudulent message designed to steal sensitive information—such as passwords, credit card numbers, or personal data—often, the spammers will ask you to click on a link (button). These scams often create a false sense of urgency or fear, prompting users to click malicious links, download infected attachments, or provide credentials to fake websites. The scammer’s goal is to gain access to sensitive data and login information, or to install malware on the victim’s device.
Look for these red flags as Phishing emails often contain these signs:
- Fake, your “Mailbox is Full” warning with a clickable link to rectify the problem.
Important: ZAWebs will NEVER ask you to fill out a form or to click a button to renew your products /services. - Fake, your “Domain has expired” warning with a clickable link to rectify the problem.
Important: ZAWebs will NEVER ask you to fill out a form or to click a button to renew your products /services. - Fake, your “Hosting has expired” warning with a clickable link to rectify the problem.
Important: ZAWebs will NEVER ask you to fill out a form or to click a button to renew your products /services. - Requests for sensitive information such as personal or financial information.
- Poor grammar and spelling errors.
- Unsolicited attachments – the email may include attachments you didn’t request.
- Unnecessary urgency – the scammer insists you reply or click a link urgently otherwise your services may stop or other bad results may occur due to the delay.
- Impersonal greeting – the email uses a generic or impersonal greeting.
- Seems too good to be true – the email offers something that seems too good to be true, like a government or tax refund or you have a parcel waiting to be collected.
- Treat suspicious emails with caution – if you receive an email you didn’t request or expect, treat it with suspicion. Do not reply or act on it – if you are ever in doubt, rather ignore the email or contact us to confirm before you do anything further.
What is Email Spoofing ?
Email spoofing is a technique used by spammers, where they forge the sender address in an email header to make the message appear as if it originated from that (actual trusted) senders email account. Spammers use the email header to mask their own identity (their own email address, such as a Gmail) and impersonate the legitimate sender.
Think before you click use common sense.
Online Security:
Why update your internet / web browser ?
Important security (and stability) improvements are installed on every update.
- On your computer, open Chrome.
- At the top right, click the 3 vertical dots.
- Click Help (or Settings). Then select/click About Google Chrome.
- Click Update Google Chrome.
- Click Relaunch on the browser if requested to do so.
How to update Microsoft Edge internet browser:
- On your computer, open Microsoft Edge.
- At the top right, click the 3 horizontal dots.
- Scroll down to Help and Feedback. Then select/click About Microsoft Edge.
- Microsoft Edge will then start its update process.
How to update Mozilla Firefox internet browser:
- On your computer, open Mozilla Firefox.
- At the top right, click the 3 horizontal line menu.
- Scroll down to Help.
- Then select About Firefox.
- Firefox will then start its update process.
- Click Relaunch if requested to do so to apply updates.
AnyDesk (remote access software)
- If you make use of AnyDesk (remote access software) – please ensure you are running the latest version.
- To updater your current version – simply go to the Anydesk website below and click on the red Download Now button to download the latest version. You will now be UPDATING your existing installation (or installing it for the first time). https://anydesk.com
Antivirus and Windows Operating System
- Ensure all computers are running an updated and valid antivirus application and that regular antivirus scans are done and the results inspected. ZAWebs can install and optimize a free top-rated anti virus application for you (installation fee applies)
- Keep your Windows OS (operating system such as Windows 10, 11) up to date as well as your computer applications/programs. Running an outdated operating system or software (PC programs) can lead to vulnerabilities.
Important: Microsoft stopped providing security updates for Windows 7 and 8/8.1 on January 10, 2023. - Turn on automatic updates on your PC and cellphone apps or update them manually on a regular basis.
- Download Malwarebytes on the link below (free premium for 2 weeks, thereafter a manual cleaner).
Install, run the scan and inspect the results – take the appropriate action or quarantine any suspicious files/programs.
Click here to download - Avast Antivirus (free or premium) – Lightweight and intuitive protection powered by a community over 435 million strong. This is next-gen cybersecurity for all. Download the free version here
- Important: your Antivirus doesn’t totally eliminate email phishing attempts – common sense does. Your installed Antivirus and anti-malware application mitigates online threats.
Microsoft Outlook versions that are no longer supported and will not receive security updates include:
- Support for Office 2007 ended on October 10, 2017
- Office 2010
Support for Office 2010 ended on October 13, 2020. - Office 2013
Support for Office 2013 ended on April 11, 2023. - Office 2016
Support for Office 2016 will end on October 14, 2025. - Office 2019
Support for Office 2019 will end on October 14, 2025.
Your Microsoft Office applications will continue to function. However, you could expose yourself to security risks running outdated and unsupported software. Upgrade to a newer version so you can stay up to date with all the latest features, patches, and security updates.
Change of Banking Details scam - how to avoid it.
How do you protect your customers, suppliers and your own business against the change of bank account details scam.
- When sending invoices or statements containing your banking details to a NEW supplier or customer – once they have received your invoice, then, contact them telephonically to confirm that the details they have received on email are infact the correct banking details.
- If you receive any change of banking details, pick up the phone and confirm with your usual contact that it’s a legitimate request before making any changes to beneficiary accounts and or payment. Rather be safe than sorry – a simple phone call to your usual contact and contact number can prevent fraud and financial losses.
Fraudsters can also intercept invoices you send to your (new or regular) customers, change your banking details to their own and send the invoice on, which your customer believes is still legitimate. - If you call your usual contact, use the phone number you have on record, rather than any details on the request. If it’s a scam the contact details will send you straight to the fraudster.
- Beware of email addresses that are almost identical to your supplier’s details, but not quite, such as .com instead of .co.za, or addresses that differ from the genuine one by perhaps one letter that can be easily missed.
- Instruct any staff who are responsible for paying invoices to examine invoices for any irregularities. If something seems strange, they should immediately escalate their suspicions.
Articles to read
- Clicked on a phishing link? 7 steps to take immediately to protect your accounts
- AnyDesk Vulnerability Exploited to Gain Admin Access Via Wallpapers
- South African banking app cybercrime warning
- Identity theft skyrockets by 400% in South Africa
- Say goodbye to Windows 10
- 6 tips to protect your new devices during the holiday season
- FakeCaptcha scams—When the “I’m not a robot” button is a trap
- Adware on the rise—Why your phone isn’t as safe as you think
- New macOS malware uses Apple’s own code to quietly steal credentials and personal data — how to stay safe
- Absa fraud warning