Fake Messages for Data Theft (Phishing)

How does a phishing attack occur?

A phishing attack usually starts with an email that at first glance looks like it was sent by a service provider. The attacker wants to create a sense of urgency by threatening to restrict access to services or banking funds if no immediate action is taken. This is to convince the recipient to:

• either click on a link and enter certain data,
• or open a malicious attachment.

The malicious link leads to a false website, which uses the graphic elements of the service provider to give an impression of credibility. It often mimics a login page with input fields where the user is supposed to enter their system login details (e.g., in My NEOSERV). In reality, however, the fake website forwards the data to the attackers.