What is Spear Phishing?

Highlights

• Spear phishing targets specific individuals.
• Protect yourself by verifying the sender's address and using strong passwords.
• Keep software up to date and report suspicious emails.

You’ve likely been the victim of a phishing attempt. Usually they involve a suspicious — and badly worded — email or text from someone claiming to be from a bank or a government agency. These attempts tend to be general, with a focus on quantity over quality. 

Recently, a new scam has emerged: spear phishing attacks. They’re more targeted and often include personal details like your name, phone number, and/or address. A recent scam has even included images of the recipient's home.

How Spear Phishing Works

Spear phishing attacks typically start with the attacker gathering information about their target — you. This information may include your name, job title, company, and/or email address. The attacker may also learn about your interests and hobbies.

Once the attacker has gathered enough information, they’ll craft a personalized email that is designed to look like it’s from a legitimate source. The email may contain a link to a malicious website or an attachment that contains malware.

If you click on the link or open the attachment, your device could be infected with malware or directed to a phishing website. The malware may allow the attacker to steal your login credentials, financial information, or other sensitive data.

How to Protect Yourself from Spear Phishing

There are a number of things you can do to help protect yourself from spear phishing attacks:

• Be suspicious of emails and texts from unknown senders.
• Never click on links or open attachments in emails or texts from unknown senders.
• Never use the phone number or email address provided in a suspicious message. Instead, verify the sender’s information using the contact information listed on legitimate websites.
• Use a strong password and enable two-factor authentication where possible on your accounts.
• Consider purchasing device protection with anti-malware and antivirus software for your digital devices, and keep it up to date. 
• Be aware of the latest phishing scams.
• Report any suspicious emails and texts to the Canadian Anti-Fraud Centre and/or your local police force.

Equifax Complete^TM Protection can help protect you from the impact of scams like spear phishing. Not only do you get credit monitoring alerts that can help you spot ID theft faster, but you’ll also get device protection with antivirus and anti-malware software.