Lessons in Protection
Christopher Hadnagy, Michele Fincher · 2015
This chapter provides a resource that includes a timeless set of ideas and foundational principles to help one learn how to protect against some of the attacks. Attackers utilize emotions that shut down the critical-thinking or logic centers and try to raise the levels of fear, sadness, or anger. Attackers are aware that potential victims are being trained to hover. Many e-mail clients even look for URLs that differ from the text in the e-mail. Other attacks can involve actually registering certificates to make the site appear legitimate and secure, but the attacker owns those certificates. Certificates can have tricky names, too, using trusted, secure, or other words that are meant to make one trust them and feel secure about clicking the links. Attackers also work around the knowledge gained by hovering by sending e-mails from actual legitimate servers that they have compromised.