
PHISH BLOCKER
Phishing attacks have nothing to hide,
we've got you covered.
This is just a sample assignment for the BDY6213-BM2B course
VIDEO
HOW TO PREVENT PHISHING ATTACK?
This video illustrates crucial scenarios involving smishing and vishing attacks. Learn how to identify and avoid falling victim to phishing scams through practical examples, including suspicious links in messages and fraudulent phone calls. Discover essential prevention and detection strategies to keep your personal and financial information safe.

Summary
Intending to enhance awareness of cybersecurity, this report studies the effects of phishing attacks on the MMU community and proposes a targeted risk management program. Phishing is a common cyber threat that represents a serious risk to both individual and institutional data. It involves sending false emails or messages with the intention of obtaining private information.






Target
Activities
Prevention
Detection
Impact
SETA

Cyberthreat activities
Cyberthreat activities encompass a range of deceptive strategies aimed at exploiting vulnerabilities and stealing sensitive information from individuals and organizations.

Email Phishing
Email phishing involves deceptive emails pretending to be from legitimate entities, prompting recipients to click on links or download attachments, leading to data theft or malware infection, often using urgency or fear.

Vishing
Vishing involves fraudulent phone calls pretending to be from trusted institutions, using urgency to obtain personal information or funds, often employing caller ID spoofing to enhance deception.

Clone Phishing
Clone phishing copies legitimate emails, alters them with malicious links or attachments, and sends them to victims, exploiting their trust in familiar content to steal information or infect devices.

Smishing
Smishing uses SMS messages impersonating banks or government agencies to trick users into clicking malicious links or downloading malware, aiming to steal personal information or infect devices.

Deceptive Phishing
Deceptive phishing creates fake websites almost identical to real ones, tricking users into entering personal information through forged emails, texts, or social media messages, leveraging brand impersonation.

Spear Phishing
Spear phishing targets specific individuals or organizations with highly customized messages based on detailed personal information, increasing the likelihood of deception and data theft.

Whaling
Whaling targets high-level executives with highly customized phishing emails disguised as important business requests, exploiting their position to gain access to confidential information for further attacks.
Cyberthreat Detection and Prevention

Cyberthreat Impact

The impacts of phishing activities to the victims, communities, organisations, country, and global.
Phishing can have disastrous effects on a variety of groups, ranging from identity theft and significant financial losses to invasions of privacy. Cyberattacks can also undermine residents’ confidence and result in a lack of resources, decreased production, harm to one’ reputation, unstable economies, compromised public safety, and other issues....

Individual

Communities

Organisations

Country

Global
Cyberthreat awareness and campaign (SETA)
Education
Training
Awareness
With a combination of in-person training by ITS and online training, as well as self-directed learning, organisations can effectively improve their employees' ability to recognise and respond to phishing attacks.
Cybersecurity incident drill and compliance-specific requirements helps employees better respond to threats and meet regulatory standards, enhancing overall security and data protection.
Through email campaigns, posters and employee cybersecurity knowledge survey, organisations are able to continually raise the safety awareness of their employees and optimise the effectiveness of their training.










