Spelt phishing, but pronounced as above, this despicable act is an effort to batter your bankroll or commandeer your cash.
To put it simply, you can get emails from account administrators, which strongly urge you to update details attached to that account. The issue, though, is the pretence of such mail.
You may not even have such an account as referenced.
It doesn't come from the account provider.
It can use false S.S.L. references, to present an illusion of trust and security.
It can prompt for immediate action on your part, alleging false log-in's by persons unknown, and from countries unknown. If action is not taken, they can impress on you, that the account will be suspended or closed. Indeed, anything likely to work can be fabricated, to get you to the webpage suggested in the link or hyperlink. Note the word "suggested". Likenesses to company logos are used to re-enforce "credibility".
In fact, these phishing attempts actually look pretty good or realistic. So much so that any qualms of guilt or stupidity, experienced by a "conned party" are groundless.
Experience, specific education or forewarning, is all that prevents this type of charade from widening its base of "victims".
The goal is to get you to type in your details, complete with credit card number and the rest can be guessed.
Some damage is also absorbed by the organisation or company being misrepresented and they can do little about it but warn their customers what to watch out for, and issue security instructions. Indeed, it is from accounts at reputable companies that most passing trade learn the correct or most secure procedures. It is therefore important to read any material that they offer.
Generally though, reputable companies with a mind to preserve their integrity will tell you to log-in at their main page and proceed from there. Not through a link specific to your account!
Hyperlinks can mask the true domain that you'll be brought to, with the text linked to www.anydomaindotcom (example, only), a replica or fake page. Only going to secure pages where one believes that "https" will do it, will always help but wholly unreliable. The "s" is an indication of a secure page, but are you at the right domain?
Place your mouse over the link and the domain attached to such a link, should show itself. Viewing the source code is another way but some knowledge of it is necessary.
Another ploy, sometimes deliberate and sometimes "convenient", is inserting a reference to the "legitimate company" anywhere after the domain name. Ex. https://www.anydomaindotcom/ebay/aagle/. Unwary victims may overlook the fact that "ebay" is not the domain, but see it anyway as a directory or file name. Anyone, anywhere can have a file or directory named like that of a company.
To make matters somewhat worse from an "easy to identify" viewpoint, the source code of the link can be represented as an I.P. address rather than its named counterpart. There are some tools that you can use at http://centralops.net/co/ which you can use to type in the I.P. address and cross reference it with the official account domain presented in the e-mail, or web page for that matter. Opening a second window for investigative purposes and re-sizing both to be side by side can be revealing, and comparisons be made between the alleged source and that of the source code.
www.ebay.com can be put in one window and www.suspiciouslyspurious.com can be put in the other. NOTE; you should be checking domains and ignoring everything that comes after the forward slash at the end of the domain. A similar test can be done for email viruses, where suspicious email addresses can be searched for some degree of authenticity.
If you are phished, try to learn as much as possible about it as phishing attempts and email viruses have some aspects in common. Incorrect spelling is one of them. You must understand that the authors can be from anywhere and not necessarily have degrees in English. Legitimate companies can also be from anywhere, with different primary languages, but do perfect their spellings and general grammar.
Attention to upper and lower case can be another giveaway. This is especially true where particular portions of the text are the design of the author, and not just copied and pasted. Typically, these portions are customised to be customer specific in a general sense, and fonts may even be different or out of place. Such "special" additions are to strengthen the sense of urgency and call to action.
Should you be the recipient of "phishy mail", you can forward it to spam@uce.gov
Seamus Dolly and phising samples are at http://www.CountControl.com/phishy.html
|
|
|
|
|
|
|
|
|
|
|


Have you ever got an email asking you to confirm... Read More
We all get the odd virus now and then, but... Read More
I'm in the Anti-Spyware business, and I'm doing a lot... Read More
By browsing a web page, you could infect your computer... Read More
I am the victim of an internet scam. It is... Read More
Since its birth, the Internet has grown and expanded to... Read More
According to the Anti-Phishing Working Group (APWG) email scams also... Read More
Internet scams and frauds are on the rise! The quantity... Read More
Blaster, Welchia, Sobig, W32, Backdoor, Trojan, Melissa, Klez, Worm, Loveletter,... Read More
Security leaks can be a big problem for any site... Read More
During the release of a new software product specialized to... Read More
Identity theft ? also known as ID theft, identity fraud... Read More
Identity theft is one of the most common criminal acts... Read More
The menacing campaigns that drive the corporate spyware and adware... Read More
Viruses are, however, not the only malicious software programs out... Read More
NETWORK SECURITIES: IMPORTANCE OF SECURITIESComputers and securities must form a... Read More
A new variation of the Nigerian Scam theme ... Read More
Shopping for horse gifts or other gift items on the... Read More
If you are wondering how to fight spyware for safe... Read More
The Internet is a vast International Network of people and... Read More
Ok, ok, I know you've seen them. All those pop... Read More
If you use the internet, you have probably been infected... Read More
If you have used a Windows machine for a while,... Read More
Fishing on the Internet has come a long way. However,... Read More
Identity Theft and Your Personal Information Identity theft is... Read More
My first experience with a spyware BHO based infection was... Read More
"Male. Obsessed with computers. Lacking a girlfriend. Aged 14 to... Read More
First the basic definition of Spyware: It is a type... Read More
Business on the internet is getting down right shameless. This... Read More
Computer security for most can be described in 2 words,... Read More
As more people are logging onto the Internet everyday, Network... Read More
For many, the daily walk to the mailbox evokes mixed... Read More
Well, this is an article I never thought I would... Read More


There are several basic concepts to keep in mind when... Read More
Credit card fraud is a growing problem for online businesses... Read More
Do you really have to know how feeds work? Not... Read More
P C. owners are constantly at risk from attacks by... Read More
Nobody wants to pay to remove spyware. At the very... Read More
Viruses, Trojans and Spyware: Protecting yourself.No user on the internet... Read More
Working from home has its advantages, including no commute, a... Read More
Blaster, Welchia, Sobig, W32, Backdoor, Trojan, Melissa, Klez, Worm, Loveletter,... Read More
Internet scams and frauds are on the rise! The quantity... Read More
Today the internet is a mine field of malicious code... Read More
"Dear Bank of the West customer", the message begins. I've... Read More
Well, this is an article I never thought I would... Read More
If you are wondering how to fight spyware for safe... Read More
Your computer is as slow as molasses. Your mouse freezes... Read More
Microsoft routinely releases new security updates, many of which are... Read More
Some months ago, before there was much publicity regarding phishing... Read More
WHAT IS HACKING?Hacking, sometimes known as "computer crime" has only... Read More
In the past I've never really paid much attention to... Read More
Beware of a New Scam Aimed at Bargain-HuntersTrying to buy... Read More
Phishing is a relatively new form of online fraud that... Read More
Well, if that would have been said to me by... Read More
Afraid that someone is monitoring your PC or installed a... Read More
The money being spent online is steadily growing. With billions... Read More
The Loss Prevention Manager should be receptive to the needs... Read More
We all know that it's dangerous to use the same... Read More
A little bit of time invested into learning about internet... Read More
Watching how the traditional media covers the latest virus or... Read More
Phishing is the act of some individual sending an email... Read More
You and I are a lot alike. We are both... Read More
There has not been a time in the history of... Read More
Viruses, Bugs, Worms, Dataminers, Spybots, and Trojan horses. The Internet... Read More
Have you ever got an email asking you to confirm... Read More
To blog or not to blog? Well, why not? Lots... Read More
Internet Security |