Everyday security awareness.
WHAT TO BE ALERT TO
Messages about accounts asking you to sign in Unexpected attachments Urgent requests Anything asking for a code Callers offering to fix your computer
WHAT NO LONGER IDENTIFIES A FAKE
Spelling and grammar.
WHAT DOES
The request itself. Legitimate organisations do not ask for passwords or codes.
THE HABIT THAT DEFEATS MOST OF THIS
Never use links in messages about accounts. Go to the site as you normally do.
WHAT TO NEVER DO
Give a verification code to anyone Grant remote access to someone who contacted you Install software suggested by a warning message
WHY THAT LAST ONE
Warnings claiming your computer is infected are themselves the attack.
WHAT TO PROTECT MOST
Email, which controls password resets for everything else.
WHAT TO USE
Unique passwords through a password manager, and a second authentication step.
WHAT TO DO IF SOMETHING HAPPENS
Report it immediately, without fear.
WHY
Speed of reporting determines how bad it becomes, and concealment is far more damaging than the mistake.
