Phishing involves using deceptive messages, usually via email or malicious websites, to trick users into providing sensitive personal information. It works by pretending to be from legitimate organizations like banks or retailers. Common goals of phishing are to steal usernames, passwords, credit card numbers, and other financial information. Phishing succeeds due to human vulnerabilities like clicking links without verifying the source, lack of awareness about threats, and weak security practices of organizations. Its negative impacts include identity theft, financial losses, and erosion of trust in online services. Users can help prevent phishing by verifying sources of communications, avoiding providing sensitive details via email, and being wary of unsolicited messages. A combination of user education and improved security technologies is

2. 

Pronounced "fishing“
The word has its Origin from two words “Password
Harvesting” or fishing for Passwords


Phishing is an online form of pretexting, a kind of
deception in which an attacker pretends to be someone else
in order to obtain sensitive information from the victim
Also known as "brand spoofing “

3. 

Phishing is a way of fraudulently acquiring sensitive
information using social engineering.
It tries to trick users with official-looking messages

◦ Credit card
◦ Bank account
◦ eBay
◦ Paypal
Some phishing e-mails also
contain malicious or unwanted
software that can track your
activities or slow your computer

5. 1. Misleading e-mails
2. No check of source address
3. Vulnerability in browsers
4. No strong authentication at websites of
banks and financial institutions
5. Limited use of digital signatures
6. Non-availability of secure desktop tools
7. Lack of user awareness
8. Vulnerability in applications

6. 1. Internet fraud
2. Identity theft
3. Financial loss to the original
Institutions
4. Difficulties in Law Enforcement
Investigations
5. Erosion of Public Trust in the
Internet.

7.  DON’T CLICK THE LINK
◦ Type the site name in your browser (such as
www.paypal.com)
 Never send sensitive account information by
e-mail
◦ Account numbers, SSN, passwords
 Never give any password out to anyone
 Verify any person who contacts you (phone
or email).
◦ If someone calls you on a sensitive topic, thank
them, hang up and call them back using a
number that you know is correct, like from your
credit card or statement.

10. Dear Valued Member,
According to our terms of services, you will have to confirm your
e-mail by the following link, or your account will be suspended
for security reasons.
http://www.uc.edu/confirm.php?account=d.mich.mal@uc.edu
After following the instructions in the sheet, your account will
not be interrupted and will continue as normal.
Thanks for your attention to this request. We apologize for any
inconvenience.
Sincerely, Uc Abuse Department
http://www.nbmd.cn/Confirmation_Sheet.pif

11. Defend against phishing
attack
1. Preventing a phishing attack before it begins
2. Detecting a phishing attack
3. Preventing the delivery of phishing messages
4. Preventing deception in phishing messages and
sites
5. Counter measures
6. Interfering with the use of compromised
information

12. Conclusion
1. No single technology will completely stop phishing.
2. However, a combination of good organization and practice,
proper application of current technologies, and improvements
in security technology has the potential to drastically reduce the
prevalence of phishing and the losses suffered from it.

13. -SHUBH THAKKAR
Thank you