Friday, February 11, 2011

Phishing: Examples and its prevention methods.

Phishing is a fraudulent cybercriminal process that try to get or steal one's personal information or identity such as usernames and password of credit cards, e-mail or social network account, e-commerce, online banking and etc. Phishers will use the information that get from their victims to access the victims personal banking account, electronic social network account and so on.

A phisher will send email and request one to log in their account with the given link. The webpage of the link will looks similar as the exist webpage. Once the person logged in, the phisher will get the victim log in requirements and details. Other than that, phisher also send e-mail with attached picture which is a reference from other website. It is because image is harder detected byt the anti-phishing filters compared to text. To prevent this from happening, people are being advised to re-type the complete URL of those website they want to visit.



Phisher will also steal one's details through pop-up windows especially when one is logging in the banking website. Method to prevent is to close the pop-up window, also the banking website, and inform the bank about the situation.





Tabnabbing is another phishing method. The scam will begin once one download a third party script unconsciously. It will get one's username and password through the website that appear exactly same as the website that the one normally used. Complete URL is require to type on in order to prevent phishing.


There are some other methods to prevent internet phishing. Install Internet Explorer 7 and Firefox version 2 which both are web browser protection tool to protect from phishing. Only use the secure website and do not use the link which is provided in the e-mail that feel suspicious. Be careful of the terms used in phishing email scam like "verify your account", "you have won the lottery", and "if you don't respond within 48 hours, your account will be closed". These mostly are the phishing scam send by email to trace one's information which ask for one's password, usernames and etc.


References:
Wikipedia Phishing, from http://en.wikipedia.org/wiki/Phishing
How to Recognize Phishing Email Messages or Links, from
http://www.microsoft.com/protect/fraud/phishing/symptoms.aspx
Phishing Examples, from http://www.supportcave.com/phishing-examples/
Eight Effective Methods to Avoid Internet Phishing Scams, from
http://www.marvquin.com/blog/eight-effective-methods-avoid-internet-phishing-scams
New Phishing Method and Identity Theft is Esay, from
http://idtheft.about.com/b/2009/01/21/new-phishing-method-and-identity-theft-is-easy.htm
What are a method of Phishing, fromhttp://wiki.answers.com/Q/What_are_a_methods_of_Phishing
Hackers Use New Phishing Methods, from
http://www.spamfighter.com/News-14988-Hackers-Use-New-Phishing-Methods.htm
Tips to help recognize fraudulent or hoax emails and links.

1 comment:

  1. It would be even better if the picture can be enlarged when a user click on it

    ReplyDelete