Typical emails will try to trick you by telling you things like your password has expired, your payment has rejected, ask you to make a payment or confirm details or attack an email for you to open. HMRC phishing emails are particularly notorious and tell you that you are entitled to a tax refund or a grant.
Sometimes, if you are prompted to click a link you are taken to a fake website where you are asked to enter your details. Other emails will include attachments that will infect your hardware with malware.
Do not open or click links in emails. If you are unsure if it's real or not always be safe, leave the email and go directly to the companies website or main phone number. If you've established that the email is fake and you have IT support then report it straight away so that they can notify others. If you don't have IT support you can report the email to report@phishing.gov.uk
To avoid getting these emails in the first place you can install email filtering tools such as Spam Titan. Anti-virus and Anti-malware software will protect your machines and Multi-factor authentication also makes it very difficult for cyber criminals to log into your accounts even if they do have your details.
Another way to protect your business is with security awareness staff training and regular, ongoing test phishing campaigns. The majority of phishing email breaches are because of a lack of awareness so educating your staff is key.
The first step to preventing attacks is knowing your risk. If you would like to speak to a member of our team you can book a no-obligation 15-minute Cyber surgery slot here.