When you create an account on any website, whether a Social Networking Website or a blogging website, you usually add your username and password and press register, this is quite simple, but this is what hackers benefit from.

Let's take an example of Facebook. 

Assume that you have a Facebook account that you have been using for many years. Now, you will be getting notifications in your registered email ID as well. 

Hackers usually get the email IDs through various frauds or data leaks that might have happened around the world and the data is sold on different online forums as well. Sometimes directly on websites like "exploit" or through the Dark Web.

So, hackers have your email ID. Now what they will do is, they will create a similar-looking page that will resemble the login page of Facebook, and will send you an email, that will say something like below;

Important Message!

Your Facebook Account is Going to Get Deactivated. Click Here to Login to Your Account and Change Settings,

Thanks,
Facebook Team

And when you will see something like this, many of you will get scared and will click on the link that has been embedded in the email and will be transferred to the Facebook page, which has a similar login procedure.

You will see a username and password section just like on any Facebook page, and then you will add your username or email and password.

Now, when you click on Login, it will say login failed or successful, depending upon what the hacker has coded in the page, and your email ID and password will be sent to the hacker.

This is not only with Facebook but with any website in the world, that asks you to log in. This can be done with Gmail Accounts, with your banking websites, or even with your share market accounts, and once they have your email IDs and passwords, they can use it anytime they want and change the password and now you cannot access your accounts.

How can we be safe from these kinds of attacks?
One of the best ways to keep yourself safe from these kinds of attacks is by learning what Hacking is and are different ways hackers can compromise your accounts.

Then you should follow some basic steps;

1. Never trust all emails in your inbox. Always try to verify where this email is coming from and if the sender of the email is genuine. This can be tough sometimes because hackers can cloak the emails and send you emails from the same email id that the company might use.
   
   Google has provided this feature in which they have given tick marks to authentic users, and hence you can also check the same before opening the email. If an email has a blue tick mark, then only open that email.
   
   
2. Never click on any link in your email or SMS. This is because some of the viruses or malicious software can directly be downloaded by opening the links as well.
   
   
3. Even if you opened a link, never enter your login credentials directly. Verify the URL. Sometimes hackers will use suspicious-looking URLs that can be identified. For example, they may use Facebookoffice.com or something that is not the official website but something that the hackers might have created.
   
   
4. Always open the website yourself by typing the name of the website in your browser and then only access your bank details or social media networks.
   
   
5. Never open your bank websites or social networks at any place other than your personal laptop or computer. If someone has activated keyloggers, then also they will get your usernames and passwords.
   
   
6. Always use 2FA or 2 Factor Authentication to register to any website, especially if it is a financial or Social Media Network, because it will ask for OTPs or extra protection to log in, which might not be available with the hacker.
   
   
7. Beaware of Social Engineering. This is one of the oldest ways of hackers to get their victim's credentials by creating a trusted environment. 
   
   
8. Learn more about hacking and how to keep yourself safe from frauds and hacks, and never share your mobile phone or your system with anyone, as thesedays one wrong click and your data is up for sale or your bank account is showing you $0.