As soon as approximately all computer users already got used to -- or at least heard about -- the word "phishing", an additional one somewhat confusing word appeared not long ago. Pharming. Does it differ from phishing -- and if yes, how?
Two Pharmings
Actually, two completely different fields use the term "pharming" now. We can say there exist two cut off "pharmings".
If genetics or businessmen from pharmaceutical business are talking about pharming (spelled like that) it might have nothing to do with computers. This word has long been customary to genetic engineers. For them, it's a merger of "farming" and "pharmaceutical" and means the genetic engineering technique -- inserting extraneous genes into host animals or plants in order to make them furnish some pharmaceutical product. Although it is a very exciting matter, this article is not about it.
As for Pc users, the term "phishing" recently emerged to denote exploitation of a vulnerability in the Dns server software caused by malicious code. This code allows the cybercriminal who contaminated this Pc with it to redirect traffic from one Ip-address to the one he specified. In other words, a user who types in a Url goes to an additional one web site, not the one he wanted to--and isn't supposed to consideration the difference.
Usually such a website is disguised to look like a legitimate one -- of a bank or a prestige card company. Sites of this kind are used solely to steal users' confidential data such as passwords, Pin numbers, Ssns and account numbers.
Dangerous Scams
A fake website that's what "traditional" phishing has in common with pharming. This scam can fool even an experienced computer user, and it makes pharming a grave threat. The danger here is that users don't click an email link to get to a counterfeit website.
Most habitancy enter their personal information, unaware of possible fraud. Why should they reckon anyone if they type the Url themselves, not following any links in a suspiciously-looking email?
Unfortunately, "ordinary" phishers are also getting smarter. They eagerly learn; there is too much money complex to make criminals earnest students. At first phishing consisted only of a social engineering scam in which phishers spammed buyer e-mail accounts with letters ostensibly from banks. The more habitancy got aware of the scam, the less spelling mistakes these messages contained, and the more fraudulent websites looked like legitimate ones.
Since about November 2004 there has been a lot of publications of a scheme which at first was seen as a new kind of phishing. This technique includes contaminating a Pc with a Trojan horse program. The problem is that this Trojan contains a keylogger which lurks at the background until the user of the infected Pc visits one of the specified websites. Then the keylogger comes to life to do what it was created for -- to steal information.
It seems that this technique is indubitably a cut off scam aimed at stealing personal data and such attacks are on the rise. Security vendor Symantec warns about commercialisation of malware -- cybercriminals prefer cash to fun, so assorted kinds of information-stealing software are used more actively.
Spy Audit survey made by Isp Earthlink and Webroot Software also shows disturbing figures - 33.17% Pcs contaminated with some schedule with data stealing capability.
However, more sophisticated identity theft attempts coexist with "old-fashioned" phishing scams. That is why users should not forget the guidance which they all are likely to have learned by heart:
- Never consequent a link in an email, if it claims to be from a financial institution
- Never open an attachment if the email is from somebody you don't know
- Protect your Pc from malware
- Stay on the alert
"Now YOU Can Create Professional 3D Animations, Games And Graphic Models Like Pixar and Dreamworks In 2 Hours or Less..."
0 comments:
Post a Comment