Here:
Home
>
Office
>
Main
>
Involving Family
>
Safety
>
Phishing
Phishing
Also Try
- Identity Theft
- Your Credit Rating
Papers
- Anti-Phishing (Antiphishing.org)
"Phishing attacks use both social engineering and technical subterfuge to steal consumers' personal identity data and financial account credentials. Social-engineering schemes use 'spoofed' e-mails to lead consumers to counterfeit websites designed to trick recipients into divulging financial data such as credit card numbers, account usernames, passwords and social security numbers. Hijacking brand names of banks, e-retailers and credit card companies, phishers often convince recipients to respond. Technical subterfuge schemes plant crimeware onto PCs to steal credentials directly, often using Trojan keylogger spyware. Pharming crimeware misdirects users to fraudulent sites or proxy servers, typically through DNS hijacking or poisoning." 7-05.
- Anti-Phishing Browser Bar (Spoofstick.com)
"SpoofStick is a simple browser extension that helps users detect spoofed (fake) websites. A spoofed website is typically made to look like a well known, branded site (like ebay.com or citibank.com) with a slightly different or confusing URL. The attacker then tries to trick people into going to the spoofed site by sending out fake email messages or posting links in public places - hoping that some percentage of users won't notice the incorrect URL and give away important information. This practice is sometimes known as 'phishing'."
"SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information. It's not a comprehensive solution, but it's a good start." 7-05.
- Phishing Definition (Webopedia.com)
"The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft." 7-05.
- Phishing Prevention (Federal Trade Commission)
Provides steps to prevent phishing. "According to the Federal Trade Commission (FTC), the nation’s consumer protection agency, phishers send an email or pop-up message that claims to be from a business or organization that you may deal with — for example, an Internet service provider (ISP), bank, online payment service, or even a government agency. The message may ask you to 'update,' 'validate,' or 'confirm' your account information. Some phishing emails threaten a dire consequence if you don’t respond. The messages direct you to a website that looks just like a legitimate organization’s site. But it isn’t. It’s a bogus site whose sole purpose is to trick you into divulging your personal information so the operators can steal your identity and run up bills or commit crimes in your name." 7-05.
- Phishing Prevention (MSN MoneyCentral)
"There's a new twist on 'phishing' scams: 'pharming.' You type in a legitimate Web address but get directed to a bogus site that steals your data."
"To determine if you're at the real site, click on the lock symbol and make sure it displays the address you expect, says Mikko Hyppönen, chief research officer of F-Secure, an Internet security company in Helsinki, Finland." 11-05.
- Phishing Prevention (Wikipedia.org)
Describes software that is designed to prevent phishing. 7-05.
|
Back to
Top

-Copyright © 1996-2007 EDI
and Dr. R. Jerry Adams-
|