Phishing is an attempt by an individual or group to solicit personal information from unsuspecting users by employing social engineering techniques. Phishing emails are crafted to appear as if they have been sent from a legitimate organization or known individual. These emails often attempt to entice users to click on a link that will take the user to a fraudulent website that appears legitimate. The user then may be asked to provide personal information, such as account usernames and passwords, that can further expose them to future compromises. Additionally, these fraudulent websites may contain malicious code.
Do’s and Don’ts to protect yourself from phishing
- Be cautious about opening any attachments or downloading files you receive regardless of who sent them
- Look for sender email ID before you enter/give away any personal information.
- Use antivirus, antispyware and firewall software (upgrade them regularly too)
- Always update your web browser and enable phishing filter
- Do use separate email accounts for things like shopping online, personal etc.
- Don't reply to an e-mail pop-up message that asks for personal or financial information.
- Don't open email that you have any suspicion may not be legitimate
- Don't supply your password or sensitive information via an email message. Vodafone will never call or email you for password etc.
- Don't open suspicious videos or images in social networking sites
- Protect your computer by installing effective anti-virus / anti-spyware / personal firewall on your computer / mobile phone and update it regularly.
for tips to Secure your Electronics from The Department of Electronics & Information Technology (DeitY)
for more details from CERT-in.