Phishing

1
Phishing

• Presented by
• Sudipto Das
• sudipto_at_cs.ucsb.edu

Information taken from Wikipedia,
http//en.wikipedia.org/wiki/Phishing
2
Presentation Outline

• What is Phishing?
• Recent Phishing Activities
• Damages Caused by Phishing
• Anti-phishing

3
What is Phishing?

• Is it a new spelling for Fishing?
• - not really!!!
• In computing, Phishing refers to a criminal
  activity using social enginerring techniques
• Phishers attempt to acquire sensitive information
  fraudulently

4
What is Phishing?

• Typically carried out by email or IM
• This attempt tries to trick the customers to
  providing account information

5
Phishing Example
6
Presentation Outline

• What is Phishing?
• Recent Phishing Activities
• Damages Caused by Phishing
• Anti-phishing

7
Recent Phishing Activities

• Earliest Phishing attempts were trying to
  register for accounts in AOL with algorithmically
  generated account numbers
• Recent targets are customers of banks and online
  payment services
• Personal information ontained from social
  networking sites used for identity theft

8
Recent Trends in Phishing
9
Presentation Outline

• What is Phishing?
• Recent Phishing Activities
• Damages Caused by Phishing
• Anti-phishing

10
Damages Caused by Phishing

• Ranges widely from loss of access to email
  accounts to financial loss and identity theft
• Once personal information has been gathered, the
  phishers can use it for purposes that are
  detrimental to the user

11
Presentation Outline

• What is Phishing?
• Recent Phishing Activities
• Damages Caused by Phishing
• Anti-phishing

12
Anti-phishing Techniques- social responses

• Train users to deal with phishing attempts
• Look for hints that tell that the message is not
  from an authentic source
• Legitimate emails from a company to its customers
  generally contain some information not readily
  available to the phishers
• One should be suspicious if a message lacks this
  piece of information

13
Anti-phishing Techniques- technical responses

• Anti-phising softwares available which integrate
  with the brwosers
• MS IE7, Mozilla Firefox 2.0 and Opera 9.1
  includes some form of anti-phishing technology
• Various sites have added verification tools to
  deal with phishing
• - e.g. BoA sitekey, Yahoo Mails Sign-In Seal

14
Thank you

• Questions?