Phishing, Smishing, Vishing, and Quishing… What? With the explosion of technology in the last 40 years, there’s a whole new dictionary of words that didn’t exist a few decades ago, and some have new meaning (mouse!). Here are four (4) you should get familiar with.
Phishing: This scam technique focuses on email. The sender is trying to get you to provide sensitive information. The email may look legit (especially with the new AI tools). They’re asking for user names, passwords, account numbers; they often tell you an account is locked or passwords are expiring, so just ‘click the link’ and enter the requested information. They may use the info themselves or provide it for sale on the Dark Web. Best line of defense here? Do Not Click The Links! Never provide this type of info through email, even if it looks legit!
Smishing is when they take the email fraud and scams to your cell phone through text messages. These links are also looking to steal information, and can even install malware such as viruses, ransomware, or spyware on the device. Often these are made to sound urgent, about a delivery, a problem with your bank, or in Larry’s case, his new cell phone purchase. How to safeguard here? Do Not Click The Links! These institutions will not text you like this. If you’re worried, call them!
Vishing: This one is all about phone calls and voicemail messages. Often these are prerecorded robocalls. Some pretty common ones are targeted at the senior community and claim to be with Social Security, Medicare, a Hospital, the phone company, utility company, an extended car warranty, and on it goes. They’ll often ask for your full name, address, Drivers’ license number, Social Security number, credit card details, ’just to confirm’ their info. In some cases, they’re trying to get you to say specific phrases, or the word ’Yes’ so they have your recorded voice. Nuts right?
Quishing: This is a take on the resurgence of the QR code which was brought back to popularity during COVID. Similar to Phishing, it’s usually an email with something they want you to do right away, but they use a QR code image instead of a URL link to click on. With this small change, it’s harder for email filters to recognize the attack. Once you follow the QR code, it takes you to their site (URL) and the game is on. In this case, don’t follow QR codes from an email. If you’re using one in a public place (restaurant, traveling) be sure NOT to click on any links or enter any personal data. —CMW