Phishing : Example and Prevention method

In computing, phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. Paypal, eBay and online banks are common targets. Phishing is typically carried out by e-mail or instant messaging and often directs users to enter details at a website. Phishing is an example of social engineering techniques used to fool users.



For example, Paypal phishing, spelling mistakes in the e-mail and the presence of an IP address in the link are both clues that this is a phishing attempt. Another giveaway is the lack of a personal greeting, although the presence of personal details would not be a guarantee of legitimacy. Other signs that the message is a fraud are misspellings of simple words and the threat of consequences such as account suspension if the recipient fails to comply with the message's requests

There are some tips for on-line user to avoid getting hooked. If some of them have received email to ask for their personal or financial information, please do not reply such email or pop-up messages. In addtion, they are advised not to cut and paste a link from the message into their web browser because phisers can make links look like what they want to go but actually they send you to a different site. Besides, user might use the latest products and services to help warn and protect them from online scams. For instance, they can install the Microsoft phishing filter using Internet Explorer 7 or higher. The Internet Explorer 7 that include the Microsoft Phishing Filter helps to protect you from Web fraud and the risks of personal data theft by warning or blocking you from reported phishing Web sites. If you use Internet Explorer 7 you will get another layer of protection with sites that use Extended Validation (EV) SSL Certificates.

Furthermore, the use of anti virus and anti-spyware software, as well as a firewall can reduced the risk of being phishing through the Internet. User should update such software regularly to ensure that the software can prevent the spyware or other unwanted software effectively.
If you have discovered any phishing mail, you can forward such mail to spam@uce.gov or to the company and bank impersonated in the phishing email. You may also report phishing email to the Anti- phishing working group at this email address reportphishing@antiphishing.org.

As a conclusion, we as the users should always be caution in opening any attachment or downloading any files from emails you receive, regardless of who sent them.