Question

CASE A

Handy cookies is a cookies Producing Company, with it headquarter in Texas. Handy cookies has three branch offices in New York, Maryland and California. The general Manager, David Morrison who is always at the headquarter sends weekly financial documents to each of the branch managers via email. Periodically, the branch managers sends important reports to each other and to the headquarters. All their messages are sent via email. The messages are sent in plain text. Recently, there was a report of an intruder who hacked into their email accounts.

Handy cookies need a security technique that can help provide confidentiality to their messages. So that an unauthorized person cannot read their messages.

CASE B

Duke Mark a 20 years customer of handy has recently received an email from Fred Abraham the manager of handy cookies California branch. The email reads

We have changed our bank account details. Can you please use the new account details as stated in this email to transfer the money for the order? If you place order and pay before tomorrow noon we offer you 20 % discount.

Account no. 00000005153258963,

Bank name: bank of northsadem

Duke Mark after reading the email quickly call Fred Abraham to inform him that he already transferred half of the money into the new account and he will be transferring the other half in two days. Immediately Fred got the call he knew that Duke has been duped. Someone has claimed to be Fred and got Duke’smoney.

Handy cookies need a security technique that can help provide message Integrity. Such protocol can ensure that messages received are from the claimed sender.

For the case above

1. Choose a well-known company (English)

2. State the date of the attack

3. Who were the attackers

4. Explain how the attack took place

5. Explain the damages/effect of the attack on the company

6. Was the problem resolved?

   a)If yes, Explain measures taken to resolve the problem and measures taken to prevent future occurrence b)If no, explain measures taken and why the problem could not be resolved

Answer 1

Recently Google.com had hit by this type of attack where the attacker send an invitation and whosoever open that invitation an application will open through which your account login credentials will be saved to the hacker's account.

In May, 2017 the attack has been reported. A group of attackers have carried out this attack though their identities are not found.

The attack is carried out in such a way that the email that is being send as a spam will trick the person to open and will gather the personal information. This attack has a sole motive to get the credit card details of the user and also tricking them to share their password.

The damage is generally faced by the users and lots of users had fallen into this trick and many personal credentials are compromised as well.

yes, the problem is resolved and the spam accounts are deleted.

For resolving this type of phishing emails, spam filtering should be used by the users as this will figure out the spam emails arriving to the inbox and directly block those email IDs and put them in the black list. Email spam filtering can help you stay protected from these types of attacks. Powerful spam detection filter will even check for images and decide whether it is a spam mail or not.