ATTACK & COUNTER MEASURES
INTRODUCTION
 Coined in 1996 by computer hackers.
 Hackers use e-mail to fish the internet hoping to hook
users into sup...
PHISHING ATTACKS
 Phishing attacks are combined with malicious code
attacks such as Mimail, Bank Withdrawal Trojan,
Mydoo...
PHISHING EXAMPLES
Example 1.
Example 2.
PHISHING TRENDS
 APWG is an industry association focused on eliminating
the identity theft and fraud that result from phi...
TECHNOLOGICAL SOLUTIONS
 Ultimate solution is training the end users not to reveal
any sensitive information.
 Basic app...
• Anti-phishing solution includes:
a.Detection: scanning, flitering and alerting
b.Mail server authentication
c. Secure we...
Secure web-authentication
Digitally signed e-mail
CONCLUSION
The phishing attacks are major threat to e-commerce and
e-banking applications. The scammers are making huge
lo...
51 phishing attacks
51 phishing attacks
51 phishing attacks
51 phishing attacks
51 phishing attacks
51 phishing attacks
51 phishing attacks
51 phishing attacks
Upcoming SlideShare
Loading in …5
×

51 phishing attacks

384 views

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
384
On SlideShare
0
From Embeds
0
Number of Embeds
4
Actions
Shares
0
Downloads
3
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

51 phishing attacks

  1. 1. ATTACK & COUNTER MEASURES
  2. 2. INTRODUCTION  Coined in 1996 by computer hackers.  Hackers use e-mail to fish the internet hoping to hook users into supplying them the logins, passwords and/or credit card information.  In a typical phishing attack a user will receive an e-mail message impersonated to be sent by a financial institution.  1%-20% users respond to such attacks.
  3. 3. PHISHING ATTACKS  Phishing attacks are combined with malicious code attacks such as Mimail, Bank Withdrawal Trojan, Mydoom.m worm etc  In such blended attacks these virus/worms carry the payloads which harness email addresses from the internet and affected systems and further launch phishing attacks.
  4. 4. PHISHING EXAMPLES Example 1.
  5. 5. Example 2.
  6. 6. PHISHING TRENDS  APWG is an industry association focused on eliminating the identity theft and fraud that result from phishing and email spoofing.  This group provides forums to discuss phishing issues, trials and evaluations of potential technology solutions.  Publish Phishing Attack Trends Report
  7. 7. TECHNOLOGICAL SOLUTIONS  Ultimate solution is training the end users not to reveal any sensitive information.  Basic approach for an effective anti-phishing effort includes detection, prevention and awareness.  Counter measures are in the form of technological solutions, policy guidelines and user awareness.
  8. 8. • Anti-phishing solution includes: a.Detection: scanning, flitering and alerting b.Mail server authentication c. Secure web-authentication d.Digitally signed e-mail e.Mail gateway filtering f. Desktop filtering
  9. 9. Secure web-authentication
  10. 10. Digitally signed e-mail
  11. 11. CONCLUSION The phishing attacks are major threat to e-commerce and e-banking applications. The scammers are making huge losses by stealing financial data from the users. There is need for adoption of counter-measure steps by the financial institutions and individual customers for fighting phishing attacks. Digital signature usage should be promoted for secure mail transactions.

×