CCT355H5 F Presentation: Phishing November Jennifer Li
What is phishing?
A fraudulent attempt, usually made through , to steal people’s personal information. Appear to come from a well-known organization and ask for your personal information credit card number, social security number, account number or password
s direct the user to visit a Web site by asking them to click a link Users are then asked to update personal information that the legitimate organization already has Bogus and set up only to steal the user’s information.
Example
Other types of phishing Web based delivery Instant messaging Trojan hosts Content Injection Search Engines Phone Phishing
How significant? 64 brands hijacked by phishing in 2008 "eBay is often spoofed, for obvious reasons. Google is increasingly being targeted because of its expansion into different business application models. The big banking names are used too--HSBC, Citigroup, Lloyds--all the major brands".
Implications Lost revenue Brand erosion Regulatory issues
Statistics Phishing costs companies more than $98billion a year More than 500 million phishing s appear in user inboxes every day Almost 80% of phishing targets consist of financial organizations, online stores, social networking sites and search engines Phishing links are clicked from received s in about 65% of cases
Beware Spelling & bad grammar Beware of links in Threats Spoofing popular websites or companies
Protect yourself from phishing Never share your account password to anyone Only enter your username and password after verifying that you are on the website of your provider. Check the URL. Only change information after initiating a session with your provider.