Phishing questions and El Capitan security
Catch 22 issues for me: old Macbook Pro, old OSX, old Chrome software regarding safe web browsing and protection from email phishing,
I ask because, even though I’m vigilant, I have possibly at some point clicked on, for example, a Whole Foods or Paypal “unsubscribe” link in an email that MAY NOT really been from Whole foods or Paypal and followed it to a webpage to unsubscribe. Phishing email addresses often appear very valid (I just called Discover card yesterday (actual phone number on my Discover card) about two recent “Discover Card” emails from discover@service.discover.com. I was informed they did not send these emails, which I opened, but did not click on any link). I’ve read a lot about phishing and, again, I’m vigilant, but I could have made a mistake at some point. I wonder about my Macbook Pro’s security features given non-updated software.
I have a mid 2012 Macbook Pro and want to keep using it because I put two ssds in it for use with Carbon Copy Cloner to automatically back up daily. I have not upgraded from El Cap 10.11.6 because I don’t want to slow the machine down. My web browser is a non-updated Chrome Version 78.0.3904.108 (64-bit). If I update Chrome it no longer functions in El Cap. (“site can’t be reached,” for anything).
A few years ago I upgraded from Snow Leopard directly to El Cap, and I’d like to hold on if it’s safe. I know there’s no longer security patches, and I wonder how important that is.
Phishing questions:
1) can just opening a malicious email really download malware?
2) If I click on a link in a malicious email, will I be informed of the download in the standard way? (the download appears in the bottom left corner of Chrome, and I need to click on it to open/install). Or can the malware download and install invisibly?
My Macbook Pro is operating properly, and my credit cards, bank accounts appear in order. Yes all my passwords are stored in a textedit document that I sometimes leave open for extended periods while web browsing or responding to emails. Question 3: how much risk am I taking with my current OS and browsing software?
[Re-Titled by Moderator]