Phishing

Study Guide

Phishing Attacks

Keyloggers

These are spywares that can get installed either into a web browser or as a device driver. They record the user’s input to the computer by recording the keyboard keystrokes or mouse click. This information will be then sent to the spyware owner. These spywares can cause severe data leak.

Torpig-family Trojan

These Trojans are using advanced technologies that help them to spread very fast and hide very well. They are designed to hijack sessions. These Trojans are constantly monitoring major banks’ websites throughout the world. They display a fake page when a user tries to log in to these websites, and in this way continue to steal the private information of their victims.

Session Hijackers

These attacks can take place either from the malware that is installed on the victim’s computer or remotely. The attacks are triggered when users is trying to log into they account (usually bank accounts) or when they initiate a transaction. The malware then hijack the session for malicious purposes.

Content-Injection Phishing

This phishing refers to the situations when malicious or fake content get injected into some legitimate websites. These content then can abuse the users of the website by redirecting them to other websites, install malware on their computers, or redirect the input that users is inputting in that website to the phishing server.

“Universal” Man-in-the-middle phishing kit

There is only little effort required for the attackers to use this method to attack their victims. The attackers use a kit which is called MITM that includes several PHP files that get installed on the phishing server. This sever then acts as a median between the user and the legitimate website that he/she wants to access. These victims receive emails that includes a link to their know website. Once they click on the link, they’ll be redirected to the phishing server which then will communicate with the original website on behalf of the user.

Search Engine Phishing

In this type pf phishing, phishers establish a webpage, and then get it indexed by the search engines to make it searchable. These pages are usually designed to include items and services at very low price to attract visitors to sign up or to enter their confidential information. The phisher then get the hold of the private information of the visitors.

Spear Phishing

In this approach the phisher targets a particular person or a specific department in a company. The phisher then contacts the person by email and pretends to be from a legitimate department and is a trustworthy staff. The attacker then asks for the username and password with some fake reasons. Once the attacker get those information the can by pass the firewalls and break into the secured network.