Phishing :
mechanisms and risks
Phishing attacks are carried out by hackers in order to extort users' personal data or, in a professional environment, their company data. By impersonating a trusted person or organisation, hackers try to contact their targets by e-mail, telephone or via the company's intranet. The only purpose of these attempts is to try to get the target to reveal information such as connection identifiers, which will then give them free access to all or part of the company data that will be used for fraudulent purposes (deletion, resale, etc.).
How to protect yourself from phishing attacks?
Firstly, it is important to know how to recognise a phishing attempt. Although they are always more inventive and skilfully disguised, phishing attempts leave more or less obvious indications of their purpose that must be identified. Methodically, various rules and systematic checks, correctly applied, can be sufficient to identify and thwart a threat.
In addition, awareness-raising can teach the right behaviour to adopt with regard to the risks involved in a phishing attack and the responsibility that this represents. Educating your users about the risks of phishing is the most effective way to minimise the chances of a successful phishing attack.