Methods used by cybercriminals to trick people into giving their information so they can use it for fraudulent purposes.
1. Phishing: Cybercriminals send emails or messages posing as a reputable organization, like a bank or government agency, to trick individuals into providing personal information such as passwords, credit card numbers, or social security numbers.
2. Social engineering: Cybercriminals manipulate individuals by building a rapport and trust with them, convincing them to willingly provide sensitive information or access to their devices. This can be through phone calls, emails, or in-person interactions.
3. Spoofing: Cybercriminals create fake websites or emails that mimic legitimate ones to trick individuals into entering their personal information. This can be done through URL manipulation, email address spoofing, or creating fake login pages.
4. Pharming: Cybercriminals redirect website traffic from legitimate sites to malicious sites, where individuals unknowingly enter their personal information, believing they are on a trusted website.
5. Malware: Cybercriminals infect computers or smartphones with malware, such as keyloggers or spyware, to capture sensitive information entered by the user, like passwords or banking details.
6. Vishing: Cybercriminals use voice calls to trick individuals into revealing sensitive information, using social engineering tactics to appear legitimate and trustworthy.
7. Smishing: Cybercriminals use text messages to trick individuals into clicking on malicious links or providing personal information, often claiming urgent action is needed to avoid consequences.
8. Baiting: Cybercriminals offer something of value, like free downloads or prizes, to tempt individuals into providing personal information or clicking on malicious links.
9. Watering hole attacks: Cybercriminals compromise websites frequented by their target victims and inject malicious code to capture sensitive information entered by users while browsing the site.
10. Man-in-the-middle attacks: Cybercriminals intercept communication between individuals and legitimate websites or services, capturing and manipulating sensitive information exchanged between the two parties.