As if you did not have enough to worry about with viruses, Spyware, SPAM and hacks into your corporate network, now comes "phishing" — a term used to describe the action of Internet scammers that try and get unknowing users to relinquish credit card information, bank account information, eBay account information and much more. Victims will receive an e-mail from what is supposedly their bank, an on-line store, AOL, eBay, etc., and be asked to click on an included www link that will bring them to the company's Internet site. Unfortunately, this e-mail was never sent from a legitimate company, but rather from a scammer that wants to steal your information. Instead of being directed to the official company website, the user will be directed to a scammer's website that is almost an exact copy of the official website. Unless you look very carefully at the contents of the site and its true origination, you might be fooled into thinking that you are on the official site. A listing of current phishing schemes and examples of screenshots can be found at the following URL: http://www.antiphishing.org/phishing_archive.html
Here are some tips to help you avoid becoming a victim of phishing tricks:
- Update your Internet Explorer (or other browser) software. There are new security updates to make some of the phishing tricks and programming fail.
- Review the above website link to familiarize yourself with phishing tactics and tricks so you know what to look for when you are solicited.
- Only enter secure information in SSL secured sites. While some phishing scammers can get SSL certificates, they usually do not go to the trouble of doing so and many SSL companies do a background check before issuing their certificates. Look for https:// in the URL or the lock in the lower right hand corner of Internet Explorer.
- If you need to visit a banking site, type the URL in yourself instead of relying on a suspicious e-mailed link to ensure that you are going to the official website.
- Realize that most companies know of the phishing problem and will not send requests to you though e-mail. Also, companies will never ask you to "validate" or "confirm" you login or account information. They already have it.
- Use a firewall and virus scanner and keep them updated to help avoid attacks and scams.
- Use an ISP such as Excalibur Technology that works to control SPAM and e-mail attacks.
- Call service providers, banks, or other companies to verify that they have sent any received requests. If they cannot confirm the request, do not respond.
- Never reply directly to a phisher, SPAMer or any other unsolicited e-mail. Don't request to be removed from their list. You'll get more unwanted email if you do.
- If you have been tricked into providing any confidential information, immediately call your bank, eBay, AOL, etc. and report the security breech and have them assist you in re-securing your account.
Happy safe computing!
-- Scott
Back to the TechBytes article listing...
|