USPS and Phishing Attacks 🎣

About USPS

USPS, United States Postal Service, is a federal government agency that is responsible for providing postal services in the US.

USPS delivers mail and packages to homes and businesses and has a large operational network of post offices and facilities scattered across the country.

They make it easy for customers to view tracking numbers, status of orders by simply sending a text message to their phone, clicking on a link that redirects them to a website that posts the status of their package.

The Statistics

According to recent reports, USPS has jumped to first place when it comes to being the prime target for phishing impersonations.

When it comes to the numbers, USPS was impersonated on a total of 11.6% of all phishing attempts in communication and online transactions.

The following includes a list of all percentage impersonations for the top ten brands:

  1. USPS (11.6%)
  2. Microsoft (9.3%)
  3. Meta (6.3%)
  4. Steam (3.2%)
  5. Telegram (2.9%)
  6. AT&T (2.7%)
  7. Charles Schwab (2.6%)
  8. Uniswap (2.3%)
  9. DHL (2.3%)
  10. One Drive (2.0%))

What is Phishing?

Phishing is a type of attack whose main purpose is to trick user/victims into revealing personal information or clicking a link.

A phishing attack can often be a user clicking a link that leads them to a malicious website that appears to be legitimate.

Other times, it includes a malicious attachment and encourages a user to open it.

Once a user clicks on a link, attackers can gain access to accounts, systems, steal sensitive information including credit card information, personal identity, or even attempt a drive-by download of malware onto a system.

Since USPS often relies on sending a text or email that helps users view package and tracking information, it is a perfect opportunity for attackers to pose as USPS, sendin a fake website that can be used to steal information about a users credentials or privates.

How can you prevent being phished?

Phishing scams are something that can be dangerous, especially if you fallen into a trap. However, there are some methods and steps you can take to help prevent falling victim to a phishing attack.

Make sure you are cautious with emails. Being skeptical and double checking the email address before opening any links can be one of the best ways to defend yourself.

Be cautious on social media and other websites. Make sure you are not oversharing personal information on platforms, as this information can be used back to you to specify an attack towards you personally.

Having security software can also be a plus. Sometimes some applications such as Gmail have reputable antivirus or anti-phishing software that can help filter out spam and other suspicious emails.

Having software can also give you a pop-up verifying if you are sure you want to click on a specific link before taking you to that site.

All in all, staying educated can help with preventing these attacks. Learning about common techniques and tactics used by criminals can help.

Read More Here: https://www.infosecurity-magazine.com/news/phishing-smishing-surge-targets-us/