Phishing (after English phishing ) has become a very big problem in security on the web. Cyber criminals are trying to access personal information such as login information by tricking users into giving up them. But how can you be fooled?
When the Daily News writes about a new phishing attack involving 1200 Swedish users have been tricked into giving up their account information in e-mail, many people in the comments writes about "how stupid can you be?" . In fact, it is unfortunately quite easy to be deceived , and has been there, you should not feel too stupid.
A major problem with phishing is that it is very difficult to stop . Security software can block known sites and try to analyze suspicious, but in the end, the programs can not prevent the user from themselves complete their tasks on a website.
A majority of phishing is to get users to surrender personal information, including login details , card numbers and such, and this information is then sold on the black market. Technology has become increasingly sophisticated and the cyber criminals are very adept at tricking users into giving up information.
Fooled you
The most common way is to get a user to visit a page where he or she is asked to log into their account - be it Hotmail , Gmail , Twitter , Facebook or any other major known services. You steal the design from the original site and try to get the URL to see the legitimate out. Then it presents itself for offering something for free, or offer any user became very curious. It can be free services, nude photos, free software, the opportunity to win cash or a trip, and so on.
Another very common way is to send up dialog boxes and windows that look likeantivirus or antispyware . It looks as if a scan is done, and then you find out that your computer is infected with the virus, and the only way to save themselves is to download an antivirus. This is about rogue security software , and is outright fraud .Such a site can look like this:
At the time of many phishing attacks, which attracts visitors with invitations to the renowned service Google Wave . There are several domains that seem to appear to have the Google wave to do, and which claims to offer users invitations ( invites ) if they fill in their details to the mailbox. If the fraudsters make a site that appears to come from Google, with a login box that looks the same as the Gmail (or any other Google service) it is easy to understand how users a little too quickly can fill in their details. If you are not sufficiently critical, it will look as if it is a legitimate Google service.
Another example I wrote about on my blog , and this was a phishing among users ofMSN Messenger (Windows Live Messenger). One spam was sent out to lots of users, where there was information that you could see which of their acquaintances who blocked one himself in his Messenger. It is clear that many chatters was curious, clicked on the link and then fill out the form on the site where they were asked to log in to their Messenger account.
The only functioning botmedlet against phishing is user training . Learn Internet users to be suspicious of things that are too good to be true. Ask you to sign in to an account, always check the web address correctly. Never give out your password to anyone, and be sure to have different passwords for each login account. I usually also recommend that you install SiteAdvisor , a browser extension that warns of suspicious and dangerous pages. SiteAdvisor is free and installs very easily.
Terminology : Dell Vostro 1320 battery | Latitude D820 battery | Sony vgp-bps13a/b | Dell Latitude E6400 battery | Toshiba laptop batteries
Recent Comments