An email that looks like it comes from your bank asks you to 'verify your account' on a link. This is typically…
Options
- A software update that the bank sends by email
- Phishing: tricking people into giving credentials (Correct option)
- A CSRF attack that is aimed against the bank
- Normal bank procedure for verifying an account
Answer
Phishing: tricking people into revealing credentials or installing malware
Why
Phishing uses fake messages that imitate trusted brands to steal passwords, card numbers or MFA codes, usually through look-alike login pages.
Signs: urgency, slightly wrong sender domains, links to unexpected addresses.
Defenses: user awareness, MFA (especially phishing-resistant keys), email filtering, and never typing credentials after clicking links in emails.
Remember
Phishing = fake messages that steal credentials.