Malware scams try to trick you into installing malicious software onto your device. This could broadcast your keystrokes to a hacker or hold your device hostage for ransom, among other possible outcomes. Phishing scams try to trick you into providing information. The information could be used for identity theft or “social engineering” attacks against your company.
Both forms of attacks are counting on you to make a mistake and provide them with the information or access they want. To help you avoid falling prey to a scam, the most basic best practice is:
Don’t click, open, or respond to anything in a suspicious email.