{"id":163,"date":"2019-10-06T06:10:49","date_gmt":"2019-10-06T05:10:49","guid":{"rendered":"http:\/\/soarexpert.com\/?page_id=163"},"modified":"2019-10-06T07:07:17","modified_gmt":"2019-10-06T06:07:17","slug":"phishing-playbook","status":"publish","type":"page","link":"https:\/\/soarexpert.com\/index.php\/phishing-playbook\/","title":{"rendered":"Phishing playbook"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t
\n\t\t\t\t

Phishing is a cybercrime in which a target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking, and credit card details, and passwords.<\/span><\/p>

Either the victim is sent a malicious attachment (such as a .XLS or .DOC file extension), or a malicious link to click on. It is important to note here that Phishing attacks have also become highly specialized, such as those of Spear Phishing and Business E-Mail Compromise (BEC). In these instances, a certain individual, or groups of individuals are specifically targeted.<\/span><\/p>

However, once the damage is done, efforts need to be taken to mitigate the damage and try to find ways so that these types of attacks don\u2019t happen again. This \u2018Playbook\u201d outlines the phases you need to take in such situations.<\/span><\/p>

\"\"<\/span><\/p>
\u00a0<\/td><\/tr>
\u00a0<\/td>\u00a0<\/td><\/tr><\/tbody><\/table>

\u00a0 \u00a0 At this stage, an alert is \u201csounded\u201d of an impending Phishing attack, and it must be further investigated into. It is important\u00a0 \u00a0 \u00a0 to collect as much information and data about the E-Mail, and here is the items that should be captured & the questions we\u00a0 \u00a0 \u00a0 need to ask:<\/span><\/p>

\u00a0<\/span>\"\"<\/span><\/p>

Carefully examine the E-Mail message, if there is actions like file investigation, link examination, picture stenography, etc,\u00a0 \u00a0 \u00a0 \u00a0Use all necessary precautions and perform the various investigations in a controlled and isolated environment<\/span><\/p>

\"\"<\/span><\/p>

If the above preliminary investigation discovers that an actual Phishing attack is underway, then the following steps must be\u00a0 \u00a0 accomplished:<\/span><\/p>