Phishing is a unique special type of ethnical hacking tool that is used to easily steal data and information from clients or other computers, it's done together with social engineering tools. It's really done to impersonate a legit user that has an account in a trusted webpage. In summary this is an act of stealing by deceive account owners into submitting their sensitive information, like usernames, passwords, credit card numbers, or other personal details.
This is usually done by cloning a trustworthy website or application through messages, most commonly email messages, phone SMS, social media messaging application to send this malicious link. This messages comes with a link that take a any user that clicks it to the cloned website or fake sites where all malicious activities are carried out.
In most cases this forged, fake or cloned website is usually steal all information the users sends or input on that login page, this actions happens so fast with a short period of time. Infact when this is done the affected victim doesn't actually know the are under attack until the have successfully impersonate and illegal use the stolen data to manipulate on account.
Phishing attacks usually start with a persuading message that is designed to look legit just as the original page looks. These messages often create a sense of utmost need, tension or fear that would want to make the prey/victim fall easily without out discovering the malicious act.
[Steemit](https://steemit.com/blog/@justyy/security-always-first-beware-of-the-recent-phishing-mails-stealing-hetzner-logins)
The inspiration of this post came from this @justyy post [source](https://steemit.com/blog/@justyy/security-always-first-beware-of-the-recent-phishing-mails-stealing-hetzner-logins), it brought back memories that made me loose some money from a phishing link attack.
**My story**
Although they phishing attacks come in different manner but my first and only experience was when I transferred steem to a locally based crypto exchange known as Roquu but my money wasn't reflecting for specific amount of time.
***
Roquu original sign up page
fake accounts with the link https://l.wl.co/l?u=https%3A%2F%2Froqquteam-web.com
***
Out of fear I went to a page named Roquu on X, to make my complain as a comment in their recent post, after some hours someone named Roquu team messaged me. He said he was part of the customer service team, then after explaining my problem. He gave me a link to use and login but unfortunately I didn't know that it was a phishing link and I feel victim because I was so scared of losing my money.
In other cases a phishing email message could come with fake claims that there has been unstable activity on your bank account and give you a fake phishing link to verify your detail but instead this cloned application is just there to steal your data that are very vital and important so that they hacker or threat can easily manipulate your account activities you no distance time
***So many types of ways of implementing and sending phishing link***
• **Email Phishing**: This is the most famous ways an cyber criminals hunts victims, they usually send some bulky mass emails that appear on famous and public sites like banks, school, political groups or crypto communities where many influencal people are randomly gotten. This links are usually embedded in this email message attack.
• **Spear Phishing**:
Unlike the email based attack that uses a broader approach, the spear phishing targets specific people or organizations. Cyber criminals
usually customize their phishing messages based on information they have gathered about this target to make their act look convincing.
### How do I keep my self safe from phishing links,
• ** Education**:
Currently what I am doing fallxms in this category, Individuals, employees, communities
and the general public should be educated about the act of phishing, and how this silent but deadly act can cause the intense problems.
***
[Source](https://support.google.com/mail/answer/6579?hl=en)
• **Email Filtering and Security Software**:
The good thing is despite the fact that there were so many phishing attacks out there we as individuals can stay safe and at same time join hand to combat phishing activities on the internet. Is not news that most emails now come with filters that help individuals easily filter that incoming email messages
• **Two-Factor Authentication (2FA)**: one of the reason those criminals cut access into my account what's because I didn't activate my two-factor authentication and this made my account so venerable to phishing attacks and other cyber-related attacks or offence.
• **Regular Updates and Patching**: It's so sad to know that most individuals don't update their softwares or they don't install patches that would help the software inherit upgraded features
