PHISHING EXPOSED
CHAPTER 1 BANKING ON PHISHING INTRODUCTION SPAM CLASSIFICATION SPAM ORGANIZATION CLASSIFICATION TECHNIQUES PHISHING CYBER-CRIME EVOLUTION WHAT IS PHISHING? WHAT’S NOT A PHISH PHISHING STATISTICS E-MAIL EFFECTIVENESS FRAUD, FORENSICS, AND THE LAW PHISHING AND THE LAW SPAM, SPYWARE, AND THE LAW PROMISING ANTIPHISHING LEGISLATION TECHNICAL RAMIFICATIONS LEGAL RAMIFICATIONS SUMMARY SOLUTIONS FAST TRACK FREQUENTLY ASKED QUESTIONS CHAPTER 2 GO PHISH! THE IMPERSONATION ATTACK THE MIRROR SETTING UP THE PHISHING SERVER SETTING UP THE BLIND DROP PREPARING THE PHISHING E-MAIL PREPARING THE CON RESULTS THE FORWARDING ATTACK E-MAIL PREPARATION THE PHISHING SERVER AND THE BLIND DROP THE POPUP ATTACK CHAPTER 3 E-MAIL: THE WEAPON OF MASS DELIVERY E-MAIL BASICS E-MAIL HEADERS MAIL DELIVERY PROCESS ANONYMOUS E-MAIL FORGING HEADERS OPEN RELAYS AND PROXY SERVERS PROXY CHAINING, ONION ROUTING, AND MIXNETS HARVESTING E-MAIL ADDRESSES HARVESTING TOOLS,TARGETS, AND TECHNIQUES HACKERS AND INSIDERS SENDING SPAM THE TOOLS OF THE TRADE THE ANTI-ANTISPAM CHAPTER 4 CROSSING THE PHISHING LINE QUICK OVERVIEW OF THE WEB DYNAMIC HTML HYPERTEXT TRANSFER PROTOCOL REQUEST, AND THEY SHALL RESPOND HTTP MESSAGE HEADER FIELDS STATUS CODES MISPLACED TRUST TARGET: REDIRECTS TARGET: REFLECTIVE QUERIES TARGET: REFLECTIVE ERROR PAGES CHAPTER 5 THE DARK SIDE OF THE WEB WHAT IS DYNAMIC HTML, REALLY? WHEN FEATURES BECOME FLAWS CAREFUL WITH THAT LINK, EUGENE EVASIVE TACTICS PATCHING FLAT TIRES PROTECT YOURSELF AGAINST FRAUD! MIXED NUTS THE CODE OF MANY COLORS A WEB SITE FULL OF SECRETS CROSS-SITE REQUEST FORGERY SESSION RIDING BLIND FAITH BROWSER BOTNETS ATTACKING YAHOO! DOMAIN KEYS THE EVOLUTION OF THE PHISHER CHAPTER 6 MALWARE, MONEY MOVERS, AND MA BELL MAYHEM! MULE DRIVING AND MONEY LAUNDERING HOW PHISHERS SET UP SHOP THE PROCESS OF RECEIVING THE MONEY WESTERN UNION MULE LIABILITY AND POSITION U S OPERATIONS AND CREDIT CARDS PHISHERS PHONE HOME DEFINING TELECOMMUNICATIONS TODAY SIP OVERVIEW SIP COMMUNICATION CALLER ID SPOOFING SBC NETWORK TAKEOVER ANONYMOUS TELEPHONY PHREAKIN’ PHISHERS! SLITHERING SCALABILITY MALWARE IN 2004 EARLY 2004 MID-2004 END OF 2004 TROJANS OF 2004 MALWARE IN 2005 MALWARE DISTRIBUTION PROCESS BOTNETS BLIND DROPS THE PHUTURE OF PHISHING CHAPTER 7 SO LONG, AND THANKS FOR ALL THE PHISH! LOOKING BACK LEGAL EAGLE INTERAGENCY GUIDELINES WHAT ABOUT SPAM? ANTIPHISHING VENDORS STATS TO THE FUTURE TRACKSPLOITATION STEALING THEIR NETWORK SEND ME PHISH!