“The sad thing is, for most users, there isn’t much you can do to prevent these kind of attacks from happening.”