Threat profile
Phishing
A message that imitates a bank, an agency or a colleague to get you to open a link, enter a password or approve a payment.
How it works
The attacker sends e-mail, SMS or a chat message that creates urgency: a blocked account, an unpaid invoice, a parcel that cannot be delivered. The link leads to a page that looks genuine and collects whatever you type, or to a file that installs malware. Targeted versions (spear phishing) use details about you or your employer to look credible.
What to look for
- The sender address and the display name do not match, or the domain is a near copy of the real one.
- Pressure to act within hours, or a threat of closing an account.
- The link text and the real destination differ when you hover over it.
- A request for a password, a one-time code or a payment outside the usual process.
What reduces the risk
- Open the service by typing its address or using its app, not through the message.
- Use a password manager: it will not fill a password on a lookalike domain.
- Turn on multi-factor authentication, preferably with a security key or passkey.
- Report the message to the IT team or the service and delete it. Never forward it to colleagues.
Related tool
Sources
Related threats
This section is for defence and learning. Do not test systems you do not own or have written permission to test: unlawful access to an information system is an offence (Turkish Penal Code, Article 243).