Phishing: Examples and prevention methods

To the point, phishing refers to the act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft such as usernames, passwords and credit card details. Before mid-2003, most phishing scams arrived in text-heavy e-mails. They were widespread with spelling errors and poor grammar that tipped recipients off. In September 2003, an e-mail fraudster registers dozens of lookalike domain names, such as yahoo-billing.com and ebay-fulfillment.com. They also create Web sites that contain the names of well-known companies and brands like microsoft.checkinfo.com.

For example:
1. Amcore Bank

2. Pay Pal

3. Amazon.com


4. Citizen Bank
There are some methods to prevent Phishing:
1. Never open an email link, if it claims to be from a bank, or credit card company. Visit the website by logging on to it yourself or simply call to see if indeed the email was sent by the company.

2. Be cautious about opening any attachment or downloading any files from emails you received, regardless of who sent them.

3. Don’t provide any answer if you get calls over the telephone claiming that its from your bank or some other agency and they are trying to get your information. Don't give it out even if you have caller id.

4. Protect your computer from spyware and viruses. Spyware programs can collect many different types of personal information about you like passwords and credit card numbers. Always use firewall, virus and spyware protection software and must update regularly.

5. Change your passwords monthly. It is advise to change your password at least once a month and try to select passwords that will not be obvious to potential hackers.

6. If you get an email or pop-up message that asks for personal or financial information, do not reply or click on the link in the message.

7. Don’t email personal or financial information. Email is not a secure method of transmitting personal information.

8. Review credit card and bank account statements as soon as you receive them to determine whether there are any unauthorized charges. If your statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances

References:

1. http://www.fairwinds.org/security/Types/fraud_phish.asp

2. http://en.wikipedia.org/wiki/Phishing

3. http://www.washingtonpost.com/wp-dyn/articles/A59350-2004Nov18.html