The holiday season is a time for joy, travel, and celebration—but it’s also a busy season for scammers. In recent years, cybercriminals have leaned heavily on social engineering tactics to trick unsuspecting victims, especially during the chaotic holiday rush.
Travelers are prime targets for phishing scams during this time. Scammers often send emails posing as legitimate companies, including airlines, or travel agencies. One common tactic is sending an email with an attachment that contains malware that the unsuspecting receive will click on.
Here’s how the scam could unfold:
- You receive an email with an attached invoice or itinerary.
- You click the attachment which triggers an error message.
- The error prompts you to download an “update” to view the document.
- When you download the update, malware is installed on your device giving scammers access to your computer.
The Rise of Smishing Attacks
Scammers are also increasing their use of Smishing (SMS phishing). These attacks involve text messages disguised as urgent alerts from your wireless carrier. For example, you might receive a text claiming your account is at risk of being disabled or your service will be interrupted unless you click a provided link. If you click the link, you may be redirected to a fake website designed to steal your personal or financial information—or worse, download malicious software onto your device.
Even during the holiday hustle and bustle, it’s important to stay vigilant. Follow these cybersecurity tips to stay safe this holiday season.
- Think before you click any links or attachments sent via text or email.
- Avoid opening unexpected attachments.
- Pay attention to who is sending the message. Is it someone you know? Is it unexpected? Is the email address correct?
- If suspicious, contact the sender using an alternate method.
- For details about an account or invoice, log into the verified site or app directly, do not use links emailed or texted to you.