Cybersecurity — Phishing

What is phishing?

Deceptive attempts to steal sensitive information.

Types

1. Email phishing: Mass emails
2. Spear phishing: Targeted attacks
3. Whaling: Executive targeting
4. Smishing: SMS phishing
5. Vishing: Voice phishing

Detection

def check_url(url):
    # Check for suspicious patterns
    suspicious = ['login', 'secure', 'account', 'update']
    for word in suspicious:
        if word in url.lower():
            return True
    return False

Email analysis

def analyze_email(headers):
    # Check SPF
    # Check DKIM
    # Check DMARC
    # Verify sender
    pass

Prevention

1. Email filtering
2. User training
3. MFA implementation
4. URL scanning

Tools

• GoPhish: Phishing simulation
• MailHandler: Email analysis
• PhishTank: URL checking

Best practices

1. Verify sender addresses
2. Don't click suspicious links
3. Report phishing attempts
4. Use email authentication

Mini Practice

1. Analyze phishing emails
2. Set up email filtering
3. Run phishing simulation
4. Train users

Up Next

Continue with Social Engineering - Human manipulation.