![\"Je](\"https:\/\/www.combell.com\/nl\/blog\/files\/2018\/05\/bijlage-in-phishing-mail.png\" "\\"Je")
<\/p>\n
You opened an attachment with a phishing mail<\/h2>\n
The attachment can contain various types of malware that cannot just infect your own computer but your entire network:<\/p>\n
- \n
- <\/i> Viruses, worms and Trojan horses<\/li>\n
- <\/i> spyware<\/a> like a keylogger: collects information about you and sends this to a third party, or takes control over your device to use it in a botnet.<\/li>\n
- <\/i> adware<\/a>: places additional adverts on each web page that you visit<\/li>\n
- <\/i> ransomware<\/a>: encrypts all data on your computer; only after payment of the ransom will you receive a key to decipher the data<\/li>\n<\/ul>\n
<\/div><\/p>\n
If you open an attachment in good faith and fear that you have activated a malware, then follow these steps.<\/p>\n
<\/p>\n- \n
- <\/i> Disconnect the connection<\/strong> between your device and the network\/Internet. This way, you prevent that you do not just infect others, but you also prevent that the malware will send data or collect instructions from the attacker. Plus, the attacker is unable to penetrate your device. If you are connected with a cable, simply pull out the cable. If you are using a wireless connection, turn off the Wi-Fi. You do not know how to do this? In the worst case, simply unplug your cable modem.<\/li>\n
- <\/i> Make a backup<\/strong> of all your data to prevent that this is damaged or erased when removing the phishing malware.<\/li>\n
- <\/i> Carry out a full malware scan<\/strong> with your antivirus program. This might take some time \u2013 be patient and meanwhile do not use your device. If the program can remove the malware, it is fine. If not, engage the help of a professional.<\/li>\n<\/ul>\n
<\/div><\/p>\n
You entered confidential data on a phishing website<\/h2>\n
Depending on the type of data you entered, the attacker can perform all kinds of malicious actions:<\/p>\n
<\/p>\n- \n
- <\/i> make purchases from a webshop in your name<\/li>\n
- <\/i> impersonate you to ask your friends, acquaintances or colleagues for money<\/li>\n
- <\/i> gain access to your work account to steal data<\/li>\n
- <\/i> make purchases with your credit card<\/li>\n
- <\/i> log in to the control module of your website to infect your visitors with malware, or steal your customer database<\/li>\n<\/ul>\n
<\/div><\/p>\n
If you entered your data and password on a bogus website in good faith, then follow these steps to limit the damage:<\/p>\n
![\"Je](\"https:\/\/www.combell.com\/nl\/blog\/files\/2018\/05\/vertrouwelijke-gegevens-in-phishing-website.png.png\")
<\/p>\n<\/p>\n- \n
- <\/i> Immediately change your password. <\/strong>If you use the same password for various services (strongly discouraged!), also change your password for these services.<\/li>\n
- <\/i> Do not forget to change the answers to the security questions<\/strong> \u2013 the questions you must answer to obtain a new password if you have forgotten yours.<\/li>\n<\/ul>\n
<\/div><\/p>\n
Victim of phishing? Do not just change your password but also the answers to the security questions that are asked in case you have lost your password!<\/p><\/blockquote>\n
Subsequently take the additional steps:<\/h2>\n
![\"Wie](\"https:\/\/www.combell.com\/nl\/blog\/files\/2018\/05\/phishing-val-wat-nu.png\")
<\/p>\n<\/p>\n- \n
- <\/i> Payment details: <\/em><\/strong>Did you specify your credit card details on a fake website, or your details for Internet banking? Block your card<\/strong> via CARD STOP (070 344 344)<\/strong>. As soon as you have done this, you are no longer liable: no payments or money transactions can be performed. With Internet banking, change your PIN number at a cash machine as soon as possible.<\/li>\n
- <\/i> Webmail: <\/em><\/strong>If you did not immediately recognise the phishing attack, there is a risk that the attacker can collect all kinds of data from your mails, e.g. login details for other accounts, contact details of family and friends. Check whether the attacker has searched your account. With Gmail, you can do this via Last Account Activity.<\/a><\/li>\n
- <\/i> Web services<\/em><\/strong> (such as a dashboard for the online management of your domain names, WordPress site, etc.): check the log files to see whether the attacker had already gained access to your control panel. If this is the case, check which data he had access to. If the attacker had access to your customer database, you must unfortunately also inform your customers. Remember the new GDPR rules in this respect: you must also inform the privacy committee!<\/li>\n
- <\/i> Check with your friends and acquaintances whether they have received any strange mails or other messages from you. Inform them about the phishing fraud and warn them for the mail in question.<\/li>\n
- <\/i> Report the attack to the company, the banking institution or the organisation whose name was fraudulently used. For Visa, you can forward the phishing e-mail to phishing@visa.com<\/a>, for Mastercard to StopIT@mastercard.com<\/a>. More info on mijnkaart.be<\/a>.<\/li>\n
- <\/i> In case of financial fraud, you can report this to the local police or meldpunt.belgie.be<\/a>.<\/li>\n
- <\/i> You can forward phishing mails to verdacht@safeonweb.be<\/a>.<\/li>\n<\/ul>\n
<\/div><\/p>\n
You can find more information on Safe Internet Banking<\/a>. This video<\/a> explains everything again. But remember: prevention is better than cure - use a healthy dose of mistrust when opening mails!<\/p>\n
Have you entered your banking details on a phishing website? Immediately block your bank card via CARD STOP (070 344 344)<\/strong>.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
Phishing attacks are often carried out with very carefully crafted e-mails, which can hardly be distinguished from legitimate e-mails from a company. So well counterfeited, that despite your caution, you...<\/p>\n","protected":false},"author":1,"featured_media":8419,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","footnotes":""},"categories":[62],"tags":[1125,41],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt.jpg",1200,420,false],"thumbnail":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-50x50.jpg",50,50,true],"medium":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-300x105.jpg",300,105,true],"medium_large":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-768x269.jpg",768,269,true],"large":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-1024x358.jpg",1024,358,true],"1536x1536":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt.jpg",1200,420,false],"2048x2048":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt.jpg",1200,420,false],"post-featured":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-850x290.jpg",850,290,true],"post-featured-opt":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-750x256.jpg",750,256,true],"post-featured-opt-md":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-850x290.jpg",850,290,true],"post-featured-opt-sm":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-485x165.jpg",485,165,true],"post-featured-opt-xs":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-375x128.jpg",375,128,true],"post-most-popular":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-50x50.jpg",50,50,true],"post-author":["https:\/\/www.combell.com\/en\/blog\/files\/In-een-phishing-val-getrapt-60x60.jpg",60,60,true]},"uagb_author_info":{"display_name":"Combell","author_link":"https:\/\/www.combell.com\/en\/blog\/author\/blogadmin\/"},"uagb_comment_info":3,"uagb_excerpt":"Phishing attacks are often carried out with very carefully crafted e-mails, which can hardly be distinguished from legitimate e-mails from a company. So well counterfeited, that despite your caution, you...","_links":{"self":[{"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/posts\/7138"}],"collection":[{"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=7138"}],"version-history":[{"count":3,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/posts\/7138\/revisions"}],"predecessor-version":[{"id":10204,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/posts\/7138\/revisions\/10204"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/media\/8419"}],"wp:attachment":[{"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=7138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=7138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.combell.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=7138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- <\/i> Webmail: <\/em><\/strong>If you did not immediately recognise the phishing attack, there is a risk that the attacker can collect all kinds of data from your mails, e.g. login details for other accounts, contact details of family and friends. Check whether the attacker has searched your account. With Gmail, you can do this via Last Account Activity.<\/a><\/li>\n
- <\/i> Do not forget to change the answers to the security questions<\/strong> \u2013 the questions you must answer to obtain a new password if you have forgotten yours.<\/li>\n<\/ul>\n
- <\/i> impersonate you to ask your friends, acquaintances or colleagues for money<\/li>\n
- <\/i> Make a backup<\/strong> of all your data to prevent that this is damaged or erased when removing the phishing malware.<\/li>\n
- <\/i> spyware<\/a> like a keylogger: collects information about you and sends this to a third party, or takes control over your device to use it in a botnet.<\/li>\n