Question

Have you or anyone you know ever been a victim of a phishing scam? Research and discuss at least three types of common scams.

1. Explain if you or anyone you know have (or have not) been a victim of a phishing scam in two or more sentences.
2. Name three common phishing scams and discuss how they work in six or more sentences.

TIA Ch 9 Phishing Discussion Rubric

Tasks Points 1. Personal experience - 2 sentences 4 2. Name and describe 3 scams - 6 sentences 6 Total 10

Answer 1

`Hey,

Note: Brother in case of any queries, just comment in box I would be very happy to assist all your queries

I have been a victim of Deciptive phishing a few years back when I started doing payments online through e-wallets. I got a link on my email saying you have won xxx cashback but, when I clicked that link my all information was passed on to the hackers and they withdrew yyy amount from my e-wallet. Through this experience I learnt a lot that we should be well informed that clicking any waste links may prove to be fatal sometimes.

1. DECEPTIVE PHISHING

The most common type of phishing scam, deceptive phishing refers to any attack by which fraudsters impersonate a legitimate company and attempt to steal people’s personal information or login credentials. Those emails frequently use threats and a sense of urgency to scare users into doing the attackers’ bidding.

For example, PayPal scammers might send out an attack email that instructs them to click on a link in order to rectify a discrepancy with their account. In actuality, the link leads to a fake PayPal login page that collects a user’s login credentials and delivers them to the attackers.

2. SPEAR PHISHING

Not all phishing scams lack personalization – some use it quite heavily.

For instance, in spear phishing scams, fraudsters customize their attack emails with the target’s name, position, company, work phone number and other information in an attempt to trick the recipient into believing that they have a connection with the sender.

The goal is the same as deceptive phishing: lure the victim into clicking on a malicious URL or email attachment, so that they will hand over their personal data.

Spear-phishing is especially commonplace on social media sites like LinkedIn, where attackers can use multiple sources of information to craft a targeted attack email.

3. PHARMING

As users become more savvy to traditional phishing scams, some fraudsters are abandoning the idea of “baiting” their victims entirely. Instead, they are resorting to pharming – a method of attack which stems from domain name system (DNS) cache poisoning.

The Internet’s naming system uses DNS servers to convert alphabetical website names, such as “www.microsoft.com,” to numerical IP addresses used for locating computer services and devices.

Under a DNS cache poisoning attack, a pharmer targets a DNS server and changes the IP address associated with an alphabetical website name. That means an attacker can redirect users to a malicious website of their choice even if the victims entered in the correct website name.

Kindly revert for any queries

Thanks.