Exercise caution when receiving unsolicited emails, messages, or links, especially from unfamiliar sources or addresses. Be skeptical of messages that evoke urgency, pressure you to take immediate action, or offer too-good-to-be-true deals or opportunities.
Before clicking on any links or downloading attachments, verify the sender’s identity and authenticity. Check the email address or contact information for inconsistencies, misspellings, or suspicious domains that may indicate phishing attempts.
Before clicking on any links embedded in emails or messages, hover your mouse cursor over the link to preview the URL. Pay attention to the destination URL displayed in the preview window and ensure that it matches the expected website or domain.
Scrutinize the URL carefully for signs of phishing, such as misspellings, extra characters, or unusual domain extensions. Be wary of shortened URLs or links that redirect to unfamiliar or suspicious websites, as they may be used to disguise phishing attempts.
Refrain from providing sensitive information, such as passwords, account credentials, or financial details, in response to unsolicited requests or prompts. Legitimate organizations will never ask you to disclose sensitive information via email or messaging platforms.
Whenever possible, communicate with sources, colleagues, and collaborators through secure communication channels, such as encrypted messaging apps or secure email services. Encrypting your communications adds an extra layer of protection against eavesdropping and interception by malicious actors.
Ensure that your devices and software applications are regularly updated with the latest security patches and updates. Vulnerabilities in outdated software may be exploited by attackers to launch phishing attacks or compromise your system security.
Strengthen the security of your accounts and online services by enabling two-factor authentication (2FA) whenever available. 2FA adds an extra layer of verification beyond passwords, making it more difficult for attackers to gain unauthorized access to your accounts.
If you suspect that you have encountered a phishing attempt or malicious link, report it to the relevant authorities, such as your organization’s IT department, internet service provider, or cybersecurity incident response team. Prompt reporting helps prevent further spread of phishing attacks and protects others from falling victim.
Stay informed about the latest phishing techniques, trends, and best practices for digital security. Educate yourself and others in your network, including colleagues, sources, and fellow citizen journalists, about the importance of phishing awareness and safe online practices.
By following these guidelines, citizen journalists can minimize the risk of falling victim to phishing attacks and protect themselves, their sources, and their sensitive information from malicious actors seeking to exploit their trust and compromise their digital security.