Phishing

From the Simple English Wikipedia, the free encyclopedia that anyone can change

An example of a phishing email, disguised as an official email from a (fictional) bank. The sender is attempting to trick the recipient into revealing secure information by "confirming" it at the phisher's website.

Phishing is a type method criminals use to get to sensitive information (like usernames or passwords). It is a method of social engineering. Very often, phishing is done by electronic mail. This mail appears to come from some bank or other service provider. It usually says that because of some change in the system, the users need to re-enter their usernames/passwords to confirm them. The users usually have a link to a page that looks almost like that of the real bank.

Through such practices, criminals get access data to bank accounts, or other platforms (like online trade platforms). Very often, it can also be used for identity theft.

Phishing grew by 42% in January of 2005: 8,829 E-mails with phishing were sent in December of 2004 but that grew to 12,845 by end of January 2005.

The number of web pages with phishing grew from 1,740 to 2,560 in the same period.

[change] Other websites

• Anti-Phishing Working Group - News about phishing and anti-phishing control methods.
• Bank Safe Online - Advice to UK consumers regarding phishing.
• Banking Scam Revealed - A public forensic examination of a phishing attack.
• CIMIP - Center for Identity Management and Information Protection.
• Duke Law & Technology Review - Plugging the "phishing" hole: legislation versus technology.
• FBI E-scams and Warnings Update - Summaries of new or active scams that use the web or e-mail.
• FTC Consumer Alert - How not to get hooked by a phishing scam.
• How Phishing Actually Works - How the bad guys actually operate.
• Indiana University Phishing Group - Collection of research articles on phishing.
• Know Your Enemy: Phishing - Case study from the Honeynet Project on detailed techniques of a couple of phishers.
• Phishing Detection and Prevention: Practical Counter-Fraud Solutions - Industry whitepaper exploring various counter-fraud techniques.
• The Phishing Guide: Understanding and Preventing Phishing Attacks - The technologies and security flaws phishers exploit.
• Phishing IQ Test - Find out how well you can recognize a Phishing email.
• Phishing mailing list - Phishing discussion, research and mitigation.
• Phishing scams gallery - A large and growing gallery of phishing examples.
• Spot phishing scams - Recognize Phishing Scams.