Phishing attacks: Emails and texts can appear to be sent from a trusted source, however, by clicking on links or opening attachments, malware or spyware can be introduced into a system where attackers can then collect sensitive information.

Vishing attacks: Phone calls and video calls where an attacker appears to be someone familiar or someone representing someone familiar is a type of attack known as vishing. Call and video chats like this make a user feel safe and trusting, and consequently more likely to share personal information. Attackers of this type will often ask for money transfers or access to accounts.

Pretexting: Pretexting is similar to vishing, but in this scenario attackers gain trust by impersonating authority figures or tech support workers and then persuading users to download files and attachments that contain malware or grant access to systems and accounts.

Be skeptical: If an employee receives an email, phone call, message, or voice mail, even if it appears legitimate, be wary and consider what exactly is being asked. If a message seems urgent or pressuring, take a step back and consider the message.

Verify information: Never click on links or attachments, and never grant access or give out information until the sender has been verified and the information is correct. Contact the individual directly, if possible.

Protect private information: Do not give out information that is private or confidential to someone who does not need to have it. Ask yourself, is this necessary? Why is this exchange important?

To build trust and seem legitimate, attackers will research a victim to gather information. By collecting publicly available data, attackers can learn names and relationships and work place details easily. Social media is a large collection of information that can be used for this type of reconnaissance. Phishing attempts and malware can also be used for collecting information to build personal profiles on victims.

Attackers then use the data that has been collected to build rapport and trust with a victim. They personalize their approach to involve family members, coworkers, or groups that are associated with the victims.

By feeling a sense of trust with the attacker, a victim will often give personal information and details, assuming they are interacting with a friend or someone they know.