Security Software Zone Security Software Zone
Home Contact Us
Search in
Forum SecurityToolbox Submit Software
Security Software Zone Login
Security Software Categories
News - Articles - Reviews
Free Newsletter
Join our mailing list and receive
security software news and
advice from our experts.
Submit
  Security Software Zone » Software Reviews » Privacy » Phishing - How criminals commit identity theft

Phishing - How criminals commit identity theft

Category: Privacy
Published: 11/20/2006, 17:53  
Editor: Security Software Zone
 
Print article
Send to a friend
Search in reviews

Do you know what "phishing" is?

No, it doesn't mean you grab a pole and head to the lake to catch some "phish".

The official Webopedia definition of "phishing" is as follows:

The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information.
Phishers prey on ignorance, fear, and emotion. They also play the numbers game. The more bait they email out, the more phish they'll catch.. By spamming large groups of people, the "phisher" counts on his email being read and believed by a percentage of people who will volunteer their personal and credit card information.

The latest attempt by identity theives to steal the personal information of eBay members hit my inbox earlier this week and I have to say, this one is pretty convincing. Even this old dog did a double-take before realizing that the identity thieves were phishing for my personal information again.

The sender of this email is listed as: eBay Member - nick and the email subject line reads: Question from eBay Member.

The email begins: "Question from eBay Member -- Respond Now. eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will not reach the eBay member. Use the Respond Now button below to respond to this message."

Listen to me: DON'T TOUCH THAT BUTTON

Of course the email was NOT sent by an eBay member or sent via eBay's messaging system, as it appears.
The email then takes on a threatening tone.
It reads: "Question from nick: I'm still waiting payment for my item for about 7 days. What happened? Please mail me ASAP or I will report you to ebay."

The recipient is then prompted to respond to this rather disturbing email by clicking a "Respond Now." button.
Doing so will take you to a website designed to look like eBay where you will be prompted to login using your eBay user name and password.
Once you pass this point you will be asked to update your account information before proceeding. Unknowing people will offer not only their eBay password, but personal and credit card information, as well, without even knowing that they are about to have their personal information stolen.

The one thing that makes this scam so effective is the threat by the supposed eBay member to "report you to eBay."
The email preys on the fear of most eBay members that they are in danger of receiving negative feedback.
The phisher is betting that most people will either be horrified by the threat of being wrongly reported to eBay or they will be ticked off that some jerk is threatening them by mistake.

Either way the phisher is counting on a percentage of people to have a reaction and login to the fake eBay website he has set up clear matters up.

I've yet to see what percentage of people who receive these phishing emails fall for the scam, but if a phisher gets recipients to turn over their personal information, he will probably consider his phishing expedition a success.
I've warned you about these phishing scams before, but let's review it one more time.

NEVER reply directly to an email that appears to have come from eBay, Paypal, Amazon, or anyoen else asking you to click a link in the email to update your account information. If there is any doubt in your mind whether or not the email is really from eBay, for example, open a browser and type in the URL http://www.ebay.com.

NEVER believe that an email supposedly from another eBay member is for real. Again, do not click an email link to reply. Open a browser and go to eBay directly and log in. If the email was from a real member, there will be a record of the inquiry in your My eBay account.
You must be aware that there are bad guys out there who do nothing but spend time trying to come up with new and innovative ways to steal your information.

Be paranoid. Be aware. But don't be fooled.

The phishers will cast their line, but you do not have to take the bait.

Bookmark to:
Add 'Phishing - How criminals commit identity theft' to Del.icio.us Add 'Phishing - How criminals commit identity theft' to digg Add 'Phishing - How criminals commit identity theft' to FURL Add 'Phishing - How criminals commit identity theft' to reddit Add 'Phishing - How criminals commit identity theft' to Technorati Add 'Phishing - How criminals commit identity theft' to Yahoo My Web Add 'Phishing - How criminals commit identity theft' to Stumble Upon Add 'Phishing - How criminals commit identity theft' to Google Bookmarks Add 'Phishing - How criminals commit identity theft' to RawSugar Add 'Phishing - How criminals commit identity theft' to Squidoo Add 'Phishing - How criminals commit identity theft' to Spurl Add 'Phishing - How criminals commit identity theft' to Netvouz Add 'Phishing - How criminals commit identity theft' to Rojo Add 'Phishing - How criminals commit identity theft' to Bloglines Add 'Phishing - How criminals commit identity theft' to Tailrank
Add comment
Security Software Zone is not responsible for the content of these User comments. The views and opinions expressed are those of the individual poster and not the Security Software Zone.
User comments (0):

There is no comment for this review.

 
Reviews related to Phishing - How criminals commit identity theft
 

Zone Alarm Security
 In this day and age it certainly pays to be computer savvy.Heck, we all have to use computers in some aspect of our lives, whether we like it or not.
Read More >
01/04/2007, 10:03
 

RuleSafe® Selected by American Institute of Certified Public Accountants
 The national professional membership and body for CPAs, the American Institute of Certified Public Accountants, has adopted the RuleSafe® policy awareness system developed by London-based company Secoda Risk Management.
Read More >
04/29/2008, 13:40
 

Partnership Between FaceTime Communications and Forensic and Compliance Systems
 Increased corporate adoption of instant messaging technology has required robust tools to enable IT professionals to ensure proper access and control. Forensic and Compliance Systems (http://www.cryoserver.com), the world's only forensic grade compliant message archiving solution, to provide IT professionals with the tools they need to better manage and archive unstructured data, announced today a strategic partnership with the leader in security, compliance and management for the new Internet, FaceTime Communications.
Read More >
04/17/2008, 11:25
 

LockLizard Releases Lizard Safeguard 2.5
 LockLizard has release the latest version of their secure PDF product, Lizard Safeguard 2.5
Read More >
01/23/2007, 09:37
 

Easier Control of Peripheral Devices Provided by Zecurion Zlock 2.0
 An expert in protection of corporate information from internal treats, Zecurion, Inc, announced the availability of Zlock 2.0. Controlling user access to peripheral devices and computer ports, this software-based system protects mid- to larger size companies from data leakage.
Read More >
04/03/2008, 09:41

Sponsored