1. CS 142 Lecture Notes: Security Attacks: Phishing
Phishing s
CS 142 Lecture Notes: Security Attacks: Phishing

2. Legitimate: Extended Validation
CS 142 Lecture Notes: Security Attacks: Phishing

3. Obviously Illegitimate
CS 142 Lecture Notes: Security Attacks: Phishing

4. Look-alike Characters
CS 142 Lecture Notes: Security Attacks: Phishing

5. Legitimate Partners Can Look Fishy
???
???
CS 142 Lecture Notes: Security Attacks: Phishing

6. International Character Sets
What does this URL refer to?
This is a host name only!
Chinese characters that look like "/", "?", and "="
CS 142 Lecture Notes: Security Attacks: Phishing

7. CS 142 Lecture Notes: Security Attacks: Phishing
Picture in picture
CS 142 Lecture Notes: Security Attacks: Phishing

8. CS 142 Lecture Notes: Security Attacks: Phishing
HTTPS Indicators
But, site can override image:
CS 142 Lecture Notes: Security Attacks: Phishing

9. Extended Validation Certificates
Normal Certificate
Special indicator ?
No obvious differences ?
CS 142 Lecture Notes: Security Attacks: Phishing

10. CS 142 Lecture Notes: Security Attacks: Phishing