Tozetta Joins the Dutch Chamber of Commerce Phishing Webinar
Tozetta, the pentest specialist, shared its expertise at the Dutch Chamber of Commerce (KvK) webinar on phishing. Ian van der Wurff joined on March 26, 2024!
Tuesday, March 26th was the day — after thorough preparation, the Chamber of Commerce's (KvK) online webinar took place. During this webinar, the dangers of phishing for organizations were explored in depth. Tozetta was asked to join as a specialist in the field of cybercrime. As co-owner and lead pentester, this was a great opportunity for Ian van der Wurff to share his knowledge on this topic!
What Is Phishing?
In an earlier blog, what is phishing, we explained this form of cybercrime. We think this is important, since it's still one of the most common cyberattacks today. Phishing is a form of scam in which criminals exploit victims' unawareness and try to deceive them.
The criminals' goal is to steal sensitive information or money. Cybercriminals essentially cast a digital fishing line (in this case, an email) with the goal of hooking your data. With this data, they can carry out certain actions they're actually not authorized to perform... This data is also worth something in itself, so it's regularly resold on platforms such as the dark web or Telegram.
How Does Phishing Work?
The classic form of phishing happens via email. A criminal poses as a legitimate company, friend, colleague, or institution in order to lure people into a trap. Often, the email address genuinely appears to come from the legitimate company (through spoofing), but as soon as the link is opened, the website doesn't match the legitimate company.
Not only can personal data be stolen this way, but things like spyware and viruses also occur regularly, with all the consequences that entails.
Does Phishing Only Happen via Email?
Officially, yes — the term "phishing" is applied to deception or cybercrime via email. If someone tries to extract information over the phone, we talk about "vishing," short for voice phishing. And if it happens via SMS, we call it "smishing."
These forms of cyberattacks do fall under one overarching term: social engineering. During social engineering, cybercriminals try to deceive the weakest link — and unfortunately, that's us, as humans...
Want to know more about social engineering? Then read our blog on this topic.
Missed the Phishing Webinar?
Did you miss the webinar? Too bad, but luckily we still have the recordings! Our ethical hacker Ian is also still available for questions on this topic. So if you have any questions, feel free to get in touch via our contact form. We'll make sure your question about cybercrime or cyber security gets addressed.