The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) has issued a warning regarding an increase in email and SMS phishing attacks, the Chronicle reports. Dr. Gift Machengete, director general of POTRAZ, stated that users should avoid opening attachments or clicking on links in unsolicited emails and text messages.
“The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) would like to alert the public of phishing scams that are on the rise mainly via e-mails and SMS,” Machengete said. “The phishing emails usually come with attachments that contain viruses and once one opens the attachment the virus becomes active and infects the user device. The phishing SMSs come with short messages enticing recipients to click on and follow a hyperlink provided in the message.”
The phishing links either install malware or take users to a web page designed to steal their credentials and personal information.
“Once one follows the link their user device gets infected with malicious software that can be used to phish (steal) user credentials and passwords contained in the device,” Machengete said. “Resultantly, users end up at high risk of having important information like usernames and passwords, bank details and PIN codes or private and confidential information stolen.”
Machengete concluded that users need to be able to identify and report these scams.
“We, therefore, wish to urge members of the public to be on the lookout for phishing emails and SMS,” he said. “Any suspicious SMSs and or emails should be reported to competent IT personnel or to the Service Providers before opening or following suspicious attachments or links as the case may be. Users should have their antivirus software regularly updated and should not open anything that has been flagged by the antivirus. Most importantly, DO NOT give anyone your Security PIN under any circumstances, even if they purport to be from your Bank or Mobile Network Provider.”
New-school security awareness training can help your employees recognize and thwart social engineering attacks.
The Chronicle has the story.
