CS 142 Lecture Notes: Security Attacks: Phishing Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing

Obviously Illegitimate http://rusprory.mass.hc.ru/old_site/update/index.php CS 142 Lecture Notes: Security Attacks: Phishing

Look-alike Characters CS 142 Lecture Notes: Security Attacks: Phishing

International Character Sets What does this URL refer to? www.bank.com/accounts/login.php?q=me.badguy.cn This is a host name only! Chinese characters that look like "/", "?", and "=" CS 142 Lecture Notes: Security Attacks: Phishing

CS 142 Lecture Notes: Security Attacks: Phishing Picture in picture CS 142 Lecture Notes: Security Attacks: Phishing

Legitimate Partners Can Look Fishy ??? ??? CS 142 Lecture Notes: Security Attacks: Phishing

CS 142 Lecture Notes: Security Attacks: Phishing HTTPS Indicators HTTP HTTPS Firefox 10 IE 8 Click on fav icon gives pop-up on bottom. Chrome 17 CS 142 Lecture Notes: Security Attacks: Phishing 7

Extended Validation Certificates CS 142 Lecture Notes: Security Attacks: Phishing

Extended Validation Certificates Normal HTTPS Firefox 10 IE 8 Click on fav icon gives pop-up on bottom. Chrome 17 Certificate Authority CS 142 Lecture Notes: Security Attacks: Phishing 9

CS 142 Lecture Notes: Security Attacks: Phishing