In this presentation on protecting oneself from phishing attacks, Hajar Bouchriha addresses the prevalent threat of phishing, which involves impersonation to illicitly obtain sensitive information such as passwords. The presentation explores various types of phishing attacks, including website and email phishing, as well as social engineering tactics that manipulate individuals. Common characteristics of phishing attempts are highlighted, along with practical tips for recognizing phishing emails and websites. The audience is encouraged to protect personal information through measures like never sharing passwords via email and using two-factor authentication. Best practices for avoiding phishing, such as keeping software updated and regular data backups, are emphasized. Case studies, like the one involving Global Enterprises, provide real-world insights and lessons learned. The presentation concludes by stressing the ongoing need for vigilance and education, both at the individual and organizational levels, to counter the persistent threat of phishing attacks in the ever-evolving landscape of cybersecurity.

1. PROTECTING
YOURSELF
FROM
PHISHING
ATTACKS
Hajar Bouchriha
Code Alpha

2. INTRODUCTION
• Phishing, is a common threat, involves impersonation to obtain
sensitive information, often passwords.
• Attackers use deceptive links and attachments, costing companies
millions and risking employee safety.
• Our goal is to keep both the business and the staff safe from
harm.

3. Website Phishing Email Phishing
TYPES OF PHISHING ATTACKS
Manipulating individuals to
divulge confidential
information.
Examples: Impersonation,
emotional manipulation.
Fraudulent websites
imitating legitimate ones.
Examples: Fake login pages,
malicious websites.
Deceptive emails to extract
information.
Examples: Fake security alerts,
account verification requests.
Social Engineering

4. COMMON CHARACTERISTICS OF PHISHING ATTEMPTS
• Urgency: Creating a sense of immediate action.
• Unexpected Emails: Receiving unsolicited emails.
• Suspicious Links: Hover over links to preview URLs
• Requests for Personal Information: Be cautious.

5. RECOGNIZING PHISHING EMAILS
Verify Email
Content.
Hover Over Links to
Preview URLs.
Check the Sender's
Email Address.
Look for Spelling and
Grammar Mistakes.

6. RECOGNIZING PHISHING WEBSITES
Verify Website Legitimacy.
Be Cautious with Pop-Up
Forms.
Check the URLs.
Look for HTTPS.

7. SOCIAL ENGINEERING TACTICS
Exploiting
Human Emotions.
Awareness of
Social Media
Manipulation.
Impersonation
Techniques.
Manipulation of
Trust.

8. PROTECTING PERSONAL INFORMATION
• Never Share Passwords via Email.
• Use Two-Factor Authentication.
• Verify Requests for Sensitive
Information.
• Be Cautious with Personal
Information Sharing.

9. BEST PRACTICES FOR AVOIDING PHISHING
● Keep software updated and use security software.
● Educate and train employees.
● Regularly backup important data.

10. CASE STUDIES
● Attack :
Global Enterprises fell victim to a phishing attack as
cybercriminals posed as a trusted vendor, deceiving
the finance department into urgently altering payment
details for an invoice. The undetected fraudulent
payment led to financial loss and strained vendor
relationships, only discovered when the legitimate
vendor inquired about the overdue payment.
● Lessons Learned :
Global Enterprises strengthened vendor payment
protocols with robust verifications and approvals.
They introduced role-specific phishing training for the
finance team, emphasizing red flag recognition and
trusted channels for payment verification.

11. FINAL WORDS
Phishing attacks will continue to happen in the future. It is up to the
organization and its employees to learn from past mistakes and not repeat them.
Employees can educate themselves on how to stop phishing emails.
Organizations can deploy the best phishing protection solutions to deal with
such situations effectively. Furthermore, organizations must include case
studies related to past incidents in the employee education
and training programs.

12. CREDITS: This presentation template was created by Slidesgo, and
includes icons by Flaticon and infographics & images by Freepik
I want to express my gratitude for your time and
active involvement in today's presentation, focusing
on safeguarding against phishing attacks. Your
engagement enhances our collective understanding
and commitment to strengthening cybersecurity
measures.
THANKS