Phishing Topics

• phishing scams
• javascript commands
• payment processors
• protocol level
• petname
• browser vendors
• graphical image
• social web
• auction sites
• grigg
• e mail
• server name
• tls
• new feature
• instant messaging
• financial information
• advent
• authentication
• passwords
• committees

Related Images

Source

Source

Source

Source

Source

del.icio.us Tags

• phishing
• security
• wikipedia
• technology
• reference
• web
• phishingg2
• internet
• ph
• p
• software
• research
• definition
• terminology
• computers
• wiki
• phi
• hacking
• spam
• online
• social
• anti
• frauds
• computer
• statistics
• moodle
• computerclub
• be_safe

Phishing, Phishing

Communications purporting to be from popular social web sites, auction sites, online payment processors or IT Administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging, and alludes to baits used to "catch" financial information and passwords.

Some phishing scams use JavaScript commands in order to alter the address bar.

Simply displaying the domain name for the visited website Some suggest that a graphical image selected by the user is better than a petname. " Phishing - What it is and How it Will Eventually be Dealt With " by Ian Grigg 2005 With the advent of EV certificates, browsers now typically display the organisation's name in green, which is much more visible and is hopefully more consistent with the user's expectations. Unfortunately, browser vendors have chosen to limit this prominent display only to EV certificates, leaving the user to fend for himself with all other certificates.

E.g., although the understanding of authentication is strong at the protocol level of the IETF committees, this message does not reach the UI groups. Webserver vendors do not prioritise the Server Name Indication (TLS/SNI) fix, not seeing it as a security fix but instead a new feature. In practice, all participants look to the others as the source of the failures leading to phishing, hence the local fixes are not prioritised.

Source: Wikipedia > Phishing