Module 2: Understanding Phishing & Social Engineering
- Recognize the signs of a phishing email or message
- Distinguish between phishing, smishing, and vishing
- Identify common social engineering tactics like urgency and authority
Phishing is a scam that tricks you into revealing sensitive information or clicking a malicious link, typically by impersonating a trusted sender like a bank, employer, or delivery company. The same tactic has specialized names depending on the channel: smishing happens over SMS text messages, and vishing happens over phone calls, often with a caller impersonating tech support or a government agency. Social engineering — the psychological manipulation behind these scams — relies on predictable triggers: a false sense of urgency ('your account will be closed in 24 hours'), impersonated authority ('this is your bank's fraud department'), and fear or curiosity. Recognizing these emotional pressure tactics is often more reliable than trying to spot technical red flags alone.
1. Which tactic is commonly used in social engineering scams?
2. Smishing is phishing conducted through:
3. Vishing refers to phishing attempts conducted via: