How to Prevent Phishing Attacks?

Phishing is a type of social engineering attack that involves a fraudulent attempt to obtain sensitive information such as usernames, passwords, and 2FA codes by disguising as NEXUS FINTRADE (Beta) in electronic communication. Scammers often use various methods, such as email spoofing, fake NEXUS FINTRADE (Beta) sites, instant messages with malicious links, social media with manipulated NEXUS FINTRADE (Beta) links, chat with impersonated NEXUS FINTRADE (Beta) support, fake NEXUS FINTRADE (Beta) hotlines or support in search engines, social media fake accounts, malware downloaded from the internet, and free WiFi phishing.

Phishing attack protection

The most important and weakest aspect of a security system is people. Hence, vigilance is key for users:

• A spoofed message often contains subtle mistakes such as spelling mistakes, strange syntax, unsmooth words, misspelled domain names, etc.

• Attackers often try to create a sense of urgency to push users into action. For example, an email could threaten account expiration and prompt users to verify their accounts within a timeline or instruct users to move assets to a secure wallet to avoid loss as soon as possible.

Phishing attack protection requires steps to be taken by both users and Protocol. Here are some steps you can take to protect yourself:

• Always upgrade Google Chrome or Mozilla Firefox to the latest version. These browsers will warn users of phishing or unsafe high-risk websites.

• Enable Two-Factor Authentication (2FA) such as Google 2FA or SMS 2FA. Be cautious and don’t disclose Google 2FA 16 digital backup keys to anyone or on any website. If your username and password are compromised, 2FA prevents the use of compromised credentials since these alone are insufficient to gain entry to the account or its funds.

• Install Chrome Netcraft Extension or Firefox Netcraft Anti-Phishing Extension to help detect and block phishing websites.

• Keep your systems and applications updated to avoid security bugs. Install anti-virus software and keep it up to date.

• Do not connect to an untrusted wireless network.

Reporting phishing

If you see any Protocol phishing sites, please report them to our Security Team Agent immediately.