How to identify Phishing Email and Phishing Website?

Email Phishing attacks rose in the Christmas 2015 season, and have continued to climb in entire 2016. But  if we can identify Phishing Email and Phishing Websites, our half problem could have been solved.

According to APWG Phishing Activity Trends Report states email phishing attacks statistics as:

• The Anti-Phishing Working Group (APWG) observed more phishing attacks in Q1 2016 since it began tracking data in 2004.
• Q1 Phishing Activity Trends Report APWG reported that the number of phishing websites increased 250% between October 2015 and March 2016.
• Most targeted industry were retail and services sector during Q1 2016
•  Phishers targeted 406 – 431 brands  in Q1 2016.
• US continued its position at top on the list of nations hosting phishing websites.
• In Q1 2016, there were 20 million new malware samples.
• The world’s most-infected countries are led by China,Taiwan and Turkey.

Get Full report on Phishing attack of 2016 Here

Now lets start with how to identify phishing email?

1. Unauthorized “From” email address : Always look into from address very carefully. For example if you receive an email from logx.in which is slightly different from logix.in there is a chance that you may do mistake.
2. Immediate action email: Many times hackers will send email with immediate call to action like “your account will be invalid within 1 hour” or “offer will expire in 1 hour”
3. Linking to fake web site: Most common phishing emails are linking to  banking website and they will create banking website exactly like your banking site. Purpose is to trick you so that you disclose your user name and password. For example https://https://www.icicibank.com is fake address. Real Web address will have forward slash (“/”)  https://www.icicibank.com/
4. Spelling errors, poor grammar, or inferior graphics are very common mistakes done by hackers.
5. Revealing personal information: Authorized organizations will never ask for personal information like password, bank account details or credit card number on email. If you receive such emails you should be extra cautious.
6. Attachments : Never open any attachment without reading and checking all details carefully.

How to identify phishing website?