Archive for the ‘Phishing’ Category

Phishing Flaw

Sunday, July 13th, 2008

A major flaw in the Internet Domain Name System (DNS) has been in existence for the last six months that could have resulted in major phishing scams worldwide, and the general public has been none the wiser.

In simple terms, the flaw effects the servers that convert the DNS code into numerical numbers so a computer user could essentially type a website name into the address bar correctly, but someone taking advantage of this flaw could cause the DNS code to change, causing the server to redirect to a fake site. In this way hackers are able to fool Internet users into thinking they are on a legitimate banking site and steal their passwords and credit card details.

Computer experts, working closely with technology giants like Microsoft and Sun, have created a patch that will effectively correct the flaw before any real damage is caused. The patch was released simultaneously through updates, and many users who had not been aware of the problem in the first place, again were oblivious to the solution.

Basically, it could have been a very nasty situation but it was saved at the last minute by some very quick thinking.

Phishing is a devastating crime and often leads to identity theft. There are many ways to protect yourself from phishing such as being aware that the danger exists. If you suspect that you might have been redirected to a fake website close the window and try loading the website again in a fresh browser. Secondly, try entering a fake password before your genuine one. Most fake websites are not geared for this eventuality.

Most importantly, don’t panic. If you feel that your credit card has been compromised at any time, just cancel it. Phishing is a very real danger but if you employ safe surfing techniques you never have to go through it.

Phishing for your details

Thursday, April 10th, 2008

Phishing is an attempt to fraudulently acquire personal information, such as user names, passwords and credit card details, by masquerading as a financial enterprise in an electronic communication.

Con artists sometimes send out millions of fraudulent e-mail messages that appear to come from Websites you trust, like your bank or Credit Card Company.

Phishers commonly use eBay, PayPal and online banks as targets.

Phishing is typically carried out via email or instant messaging, and directs users to enter details at a website accessible via a link. Computer users are duped into following the link embedded in a genuine looking e-mail, complete with seemingly authentic images and logos.

The instruction is usually for the user to verify their account details. Once the phishers have your personal details they can steal your identity and empty your bank accounts, make credit card purchases and even apply for home loans in your name.

If you suspect that an e-mail that you received from a financial institution is not the genuine article there are four characteristics you can watch out for.

1. Verify your account.

A bank will never ask you to send passwords, login names, Social Security numbers, or other personal information via e-mail. This should be your first warning bell.

2. If you don’t respond within 48 hours, your account will be closed.

Phishing e-mails usually convey a sense of urgency so that you will respond immediately without thinking or without looking at the e-mail too closely.

3. Dear Valued Customer.

Phishing e-mail messages are sent out in bulk so the chances are that they will not contain your first or last name.

4. Click the link below to gain access to your account.

Look closely at the link the e-mail is asking you to follow. The link may look phoney in which case, do not click it. A common trick phishers use is to make the anchor text for a link appear to be valid, when the link actually goes to the phishers’ site. Try opening the link in a new window and then opening the financial institution’s website in another window and compare the two.

Downloading a good anti-spam product is an excellent way of protecting your computer against both phishing and spam.

Spam Controls uses a unique spam pattern classification technology giving it a 97% detection rate. This product is also fully compatible with Microsoft Outlook and Outlook Express as well Pop3 e-mail accounts.