This document discusses phishing and how it works. It defines phishing as sending fraudulent emails pretending to be a legitimate company to trick users into revealing private information like passwords, credit cards, or bank details. The document includes a flow chart that color codes safe and dangerous email elements, advising users to check attachments from unknown senders online before opening. It lists the typical steps of a phishing attack, such as embedding links to fake websites asking for sensitive data, installing malware via attachments to steal information, spoofing the sender address to appear trustworthy, and impersonating company vendors over the phone.

1. NAME : TARUNIKAH
SUNDRAJAH PILLAI
NUM.MATRIK:18070199
PROGRAM : DCF 3

2. PHISHING
• Definition
Phishing is the act of sending an email to a user falsely claiming
to be an established legitimate enterprise in an attempt to scam the
user into surrendering private information that will be used for identity
theft.Phishing email will typically direct the user to visit a website where
they are asked to update personal information, such as a password,
credit card, social security, or bank account numbers, that the legitimate
organization already has.

3. FLOW OF THE CRIME

4. The flow chart addresses the three biggest email
dangers: Attachments, links and social engineering.
The chart has been color coded for easier recognition
of safe and dangerous elements in emails. All red
elements in the flow chart are considered dangerous
while blue elements are considered safe.
The chart furthermore provides basic suggestions on
how to react when possible dangerous elements are
encountered, for attachments it is to save them locally
and check them with a service like Virus total online.
That is better than opening them right away and
hoping that the resident antivirus solution, if one is
installed, catches any attack that gets carried out in
the process.

5. THE STEPS OF THE CRIME
 Embedding a link in an email that redirects your employee to
an unsecure website that requests sensitive information.
 Installing a Trojan via a malicious email attachment or ad
which will allow the intruder to exploit loopholes and obtain
sensitive information.
 Spoofing the sender address in an email to appear as a
reputable source and request sensitive information.
 Attempting to obtain company information over the phone by
impersonating a known company vendor or IT department.

6. THANK YOU