際際滷

際際滷Share a Scribd company logo
油
Need for consumer awareness Increase in use of the internet for business activities like B2C Online payments through credit cards, electronic wallets, electronic cash. Also transfer of funds from online bank account portals etc.
油
油
The screeners of the websites shown were not authentic websites!!!!! THEY ARE FRAUDULENT WEBSITES-A CLASSIC EXAMPLE OF PHISHING!
Phishing  Fishing for personal information Use spoofed e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc.  Anti-Phishing Working Group
Examples of phishing From: Customer Support [mailto:support@citibank.com] Sent: Thursday, October 07, 2004 7:53 PM To: Eilts Subject: NOTE! Citibank account suspend in process Dear Customer: Recently there have been a large number of cyber attacks pointing our database servers. In order to safeguard your account, we require you to sign on immediately. This personal check is requested of you as a precautionary measure and to ensure yourselves that everything is normal with your balance and personal information. This process is mandatory, and if you did not sign on within the nearest time your account may be subject to temporary suspension. Please make sure you have your  Citibank(R) debit card number and your User ID and Password at hand . Please use our secure counter server to indicate that you have signed on, please click the link  bellow:   http://211.158.34.249/citifi/ . Note that we have no particular indications that your details have been compromised in any way. Thank you for your prompt attention to this matter and thank you for using Citibank(R) Regards, Citibank(R) Card Department (C)2004 Citibank. Citibank, N.A., Citibank, F.S.B.,  Citibank (West), FSB. Member FDIC.Citibank and Arc
Never click on hyperlinks Use Anti-SPAM filters Use Anti-Virus Software Use personal firewalls Keep all software updated Always look for https and sites that ask for personal information Keep computer clean from Spyware Know Fraudulent activity on the Internet Check your credit report immediately for free! If unsure, ask!
Any technology that aids in gathering information about a person or organization without their knowledge. On the Internet (where it is sometimes called  a spybot  or  tracking software ), spyware is programming that is put in someone's computer to secretly gather information about the user and relay it to advertisers or other interested parties .  What is Spyware?
PHARMING Pharming油occurs when a油 hacker 油redirects website traffic from a legitimate website to the hacker's fraudulent website by油 exploiting 油 vulnerabilities 油in the油 Domain Name System 油(DNS). By corrupting a computer's knowledge of how a site's油 domain name 油maps to its油 IP address , the attacker causes the victim's computer to communicate with the wrong servera technique known as油 domain hijacking . By constructing a fake web site that looks like a legitimate site that might ask for the user's personal information ,
such as a copy of a油 bank 's website, the fraudster can " phish ", or steal by means of false pretenses, a victim's passwords ,油 PIN 油or油 bank account 油number. The combination of domain hijacking with a phishing website constitutes farming. Although many such sites use the油 Secure Sockets   Layer 油(SSL) protocol to identify themselves cryptographically and prevent such fraud, SSL offers no protection if users ignore their web browsers' warnings about invalid SSL server 油 certificates . Such warnings occur when a user connects to a server whose SSL certificate does not match the address of the server.
油
In an油 online auction scheme , a fraudster starts an auction on a site such as油 eBay 油or油 TradeMe 油with very low prices and no reserve price, especially for typically high priced items like watches, computers, or high value collectibles. The fraudster accepts payment from the auction winner, but either never delivers the promised goods, or delivers an item that is less valuable than the one offeredfor example, a counterfeit, refurbished, or used item. Online retail schemes 油involve complete online stores that appear to be legitimate. As with the auction scheme, when a victim places an order through such a site, their funds are taken but no goods are sent, or inferior goods are sent
The best we can do is be aware of all the scam activities around us and keep our eyes open and take extra precaution!! Prevention is better than cure!!
油

More Related Content

Internet scams

  • 1.
  • 2. Need for consumer awareness Increase in use of the internet for business activities like B2C Online payments through credit cards, electronic wallets, electronic cash. Also transfer of funds from online bank account portals etc.
  • 3.
  • 4.
  • 5. The screeners of the websites shown were not authentic websites!!!!! THEY ARE FRAUDULENT WEBSITES-A CLASSIC EXAMPLE OF PHISHING!
  • 6. Phishing Fishing for personal information Use spoofed e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc. Anti-Phishing Working Group
  • 7. Examples of phishing From: Customer Support [mailto:support@citibank.com] Sent: Thursday, October 07, 2004 7:53 PM To: Eilts Subject: NOTE! Citibank account suspend in process Dear Customer: Recently there have been a large number of cyber attacks pointing our database servers. In order to safeguard your account, we require you to sign on immediately. This personal check is requested of you as a precautionary measure and to ensure yourselves that everything is normal with your balance and personal information. This process is mandatory, and if you did not sign on within the nearest time your account may be subject to temporary suspension. Please make sure you have your Citibank(R) debit card number and your User ID and Password at hand . Please use our secure counter server to indicate that you have signed on, please click the link bellow: http://211.158.34.249/citifi/ . Note that we have no particular indications that your details have been compromised in any way. Thank you for your prompt attention to this matter and thank you for using Citibank(R) Regards, Citibank(R) Card Department (C)2004 Citibank. Citibank, N.A., Citibank, F.S.B., Citibank (West), FSB. Member FDIC.Citibank and Arc
  • 8. Never click on hyperlinks Use Anti-SPAM filters Use Anti-Virus Software Use personal firewalls Keep all software updated Always look for https and sites that ask for personal information Keep computer clean from Spyware Know Fraudulent activity on the Internet Check your credit report immediately for free! If unsure, ask!
  • 9. Any technology that aids in gathering information about a person or organization without their knowledge. On the Internet (where it is sometimes called a spybot or tracking software ), spyware is programming that is put in someone's computer to secretly gather information about the user and relay it to advertisers or other interested parties . What is Spyware?
  • 10. PHARMING Pharming油occurs when a油 hacker 油redirects website traffic from a legitimate website to the hacker's fraudulent website by油 exploiting 油 vulnerabilities 油in the油 Domain Name System 油(DNS). By corrupting a computer's knowledge of how a site's油 domain name 油maps to its油 IP address , the attacker causes the victim's computer to communicate with the wrong servera technique known as油 domain hijacking . By constructing a fake web site that looks like a legitimate site that might ask for the user's personal information ,
  • 11. such as a copy of a油 bank 's website, the fraudster can " phish ", or steal by means of false pretenses, a victim's passwords ,油 PIN 油or油 bank account 油number. The combination of domain hijacking with a phishing website constitutes farming. Although many such sites use the油 Secure Sockets Layer 油(SSL) protocol to identify themselves cryptographically and prevent such fraud, SSL offers no protection if users ignore their web browsers' warnings about invalid SSL server 油 certificates . Such warnings occur when a user connects to a server whose SSL certificate does not match the address of the server.
  • 12.
  • 13. In an油 online auction scheme , a fraudster starts an auction on a site such as油 eBay 油or油 TradeMe 油with very low prices and no reserve price, especially for typically high priced items like watches, computers, or high value collectibles. The fraudster accepts payment from the auction winner, but either never delivers the promised goods, or delivers an item that is less valuable than the one offeredfor example, a counterfeit, refurbished, or used item. Online retail schemes 油involve complete online stores that appear to be legitimate. As with the auction scheme, when a victim places an order through such a site, their funds are taken but no goods are sent, or inferior goods are sent
  • 14. The best we can do is be aware of all the scam activities around us and keep our eyes open and take extra precaution!! Prevention is better than cure!!
  • 15.