What is Phishing?

 Phishing:- 

It is the most common form, is the process of luring a victim to a fake website by clicking on a link.The victim usually encounter the link in email message sent to him on a web page Bin browse by him.

It's a methods Mostly Used by the hackers to Trap Peoples and get valuable Information From User Site's Or System.

Its Many Types of Online Methods to Trap the People and get the Information they want and they use that information in many Purpose or Sold your Information too some one harm you or your data directly or Indirectly.

Once the victim click on the link He/She may be induced to divulge sensitive information such as His credit card number or password.

Phishing attempts often use URL's dad are very similar to the real URL.

For example:

Real URL maybe www.Truebank.com 

Fake URL maybe www.Trubank.com

      FIG : PHISHING 

Methods of Phishing:

Three of the most popular methods fisher employee are as follows:

(1). Impersonation :- Impersonation Is the most popular in the most simple method of Deceit.

It consists of a completely constructed back side that the recipient is divided into visiting.

This website contains images from the real website and might even be linked to the real site.

(2). Forwarding :- formatting is seen more with Amazon eBay and paypal and is an email you typically e receive that has all the usual real website graphics and login with in it.

When a victim logs in via forwarding email link the users data is sent to the hostile server.

(3).Pop-Ups :- The third basic method is the popup Attack, a very creative but limited approach.

The pop technique you was first discovered during the period of phishing attack on Citibank in September 2003.

This was essentially a link that you clicked within your email and it posted a hostile popup.

But behind the popup was the actual target that the attackers were trying to steal data from.

Types Of Phishing :- 

                                                                FIG : Types Of Phishings.  

(1). Man-in-the-middle Phishing :- It is harder to detect than many other forms of phishing.

In this attack position themselves between the user and the legitimate website or system.

They record the information being entered but continue to pass it on so far so that user attraction are not affected.

Letter they sale or use the information or materials collected when the user is not active on the system.

(2).URL Obfuscation Attacks :- The Secret for many phishing attacks is to get the message recipient to follow a hyperlink URL to the attackers server without them realising that they have been duped. 

Unfortunately phishers have access to an increasingly large Arsenal of methods for obfuscating the final destination of the customers web request.

(3). Hidden attacks :-   Extending beyond the obfuscation technique discussed earlier an attacker Mein make use of HTML,DHTML and other escape table code that can be interrupted by the customer web browser and used to manipulate the display of the rendered information.

(4).Client-side Vulnerabilities :- The sophisticated browser customer used to surf the web just like any other commercial pieces of software, are often vulnerable to a myriad of attacks. 

The more functionally built into the browser,the more likely their exists a vulnerability that could be exploited by an attackers to gain access to, or otherwise observe,confidential information of the customer.

(5). Deceptive phishing :- The term phishing originally referred to account theft using instant messaging but the most common broadcast method Today is a deceptive email message. 

Message about the need to verify account information system failure requiring user to re enter their information.

(6). Malware Based Phishing :- It refers to scam that involve running malicious software on users PC.

Balveer can be introduced as an email attachment downloadable file from our website or by exploiting known security vulnerabilities - a particular issue for small and medium business Who are not always able to keep their software applications up-to-date.

(7). DNS based Phishing :- Pharming Is the term given to host file modification or domain name system-based phishing. 

With a a Pharming scheme, Hicas temper with a company's host file or domain name system so that request for URL on am service return a bogus address and subsequent communication are directed to a fake site.

(8). Content injection phishing :- It describe the situation where a CA replace part of the content of a legitimate site with false content designed to mislead for MS direct the user into giving upon their confidential information to the hacker.

For example hacker may inserted malicious code to user credentials or an overlay which can srcretly collect information and deliver it to the hacker's phishing server.

(9). Search engine phishing :- it occurs when Phishers create website with attractive sounding offers and have them indexed legitimate with search engine. 

User find the site in the normal course of Searching for product or services and are pulled into giving up their information.