What is phishing?
Everyone
knows that what is fishing, it is a practice of catching fish in a water body
with the help of a bait hook.
|
Fishing |
Phishing
is also a similar process like fishing, it is the process in which a fake
address link, page, offer, telephone call, email,(bait hook) is targeted or
send to lure the targeted individual (fish) into
providing sensitive information like- bank details, login password, credit card
details, and any other information.
Phishing
is a form of fraud in which the attacker tries to learn information by
masquerading as a reputable entity or person in email, or other communication
channels.
|
Phishing |
Phishing
is popular with cybercriminals, as it is far easier to trick someone into
clicking a malicious link in a seemingly legitimate email than trying to break
through a computer’s defenses. Although some phishing emails are poorly written
and clearly fake, sophisticated cybercriminals employ the techniques of
professional marketers to identify the most effective types of messages --
the phishing "hooks" that get the highest "open" or
click through rate and the Facebook posts that generate the most likes.
Phishing campaigns are often built around the year's major events, holidays and
anniversaries, or take advantage of breaking news stories, both true and
fictitious.
To
make phishing messages look like they are genuinely from a well-known company,
they include logos and other identifying information taken directly from that
company’s website. The malicious links within the body of message are designed
to make it that they go to the spoofed organization.
The
use use of sub-domains and misspelled URLs (typo-squatting) are common
tricks, as is homograph spoofing -- URLs created using different logical
characters to read exactly like a trusted domain. Some phishing scams use
JavaScript to place a picture of a legitimate URL over a browser’s address bar.
The URL revealed by hovering over an embedded link can also be changed by using
JavaScript.
Era-
At present about 30 lac phishing mails, links and other communication channels are send in India, every week and about 2 to 5 % targets individuals gets phished and loose their privacy.
Security Measures-
- Guard against spam emails.
- Communicate personal information only via. phone or secured websites.
- Do not click on links, download file or open attachments in emails from unknown senders.
- Never email personal or financial information, even if you are close to the recipient.
- Beware of links in emails that ask for personal information.
- Never enter your personal information in pop-up screen.
- Protect your computer with a firewall, spam filter, updated anti-virus, and anti-malware software.
- Check your bank accounts and bank statements regularly.
Thanks for reading
Keep your information system safe and secure.
Best regards, from Ethical Hacking.