PHISHING: CUTTING THE IDENTITY THEFT LINE
CHAPTER 1: PHISHING FOR PHUN AND PROFIT WHY GO PHISHING? IT’S EVERYONE’S FAULT TERMS PHISHING SCAMS WHAT HAPPENS IN A PHISHING ATTACK WHO IS DOING THE PHISHING? SCRIPT KIDDIES SERIOUS CRACKERS ORGANIZED CRIME TERRORISTS WHERE THEY COME FROM WHO IS TARGETED? END USERS BUSINESSES PHISHING PARAPHERNALIA COMPROMISED BOXES FREE EMAIL ACCOUNTS THE OTHER KIND OF PHISHING ACCOUNT FRAUD AND IDENTITY THEFT ACCOUNT FRAUD HOW EASY IS IT TO STEAL MY IDENTITY? WHY PHISHING ISN’T GOING AWAY CONTENTS CHAPTER 2: BAIT AND SWITCH: PHISHING EMAILS SPAM! WONDERFUL SPAM! BULK MAIL LEGAL CONSIDERATIONS HOW TO SEND SPAM WHERE TO SEND SPAM HTML EMAIL HOW TO AVOID SPAM FILTERS BREAK UP THE TRIGGER WORDS USE FILLER TEXT HIDE THE SPAM HOW TO FOOL A PHISH SPOOF A BRAND SUGGEST URGENCY FAKE A FROM: ADDRESS SPOOFED SENDERS NEAR-MISS DOMAIN NAMES WEBMAIL ADDRESSES YOUR NAME AND NUMBER LINKS BASIC HTML LINKS JAVASCRIPT ROLLOVERS IMAGE MAPS ALL-IN-ONE PHISHING EMAILS CHAPTER 3: FALSE FRONTS: PHISHING WEBSITES PHISHING SERVERS HOW TO TAKE OVER COMPUTERS WHICH COMPUTERS TO TAKE OVER WHAT TO DO ONCE YOU’RE IN ONE SITE, TWO SITES IT’S NOT DEAD, IT’S RESTING! SAVING INFORMATION LOOKING GOOD STEALING SOURCE CODE PROGRESSIONS OF SCREENS WELL-PLACED ERROR MESSAGES LINKS BACK TO THE ORIGINAL SITE DISABLING RIGHT-CLICK URL SPOOFING POPUPS ADDRESS BAR SPOOFING POPUPS IN FRONT OF THE LEGITIMATE WEBSITE POPUPS FOR VERISIMILITUDE CONFUSION NEAR-MISS DOMAIN NAMES (AGAIN) BARE NAKED IP ADDRESSES USER AUTHENTICATION CONFUSION VULNERABILITIES IDENTIFYING BROWSERS INTERNET EXPLORER OTHER BROWSERS PUBLIC KEY ENCRYPTION, CERTIFICATES, AND SSL PUBLIC AND PRIVATE KEYS CERTIFICATES SECURE SOCKETS LAYER PHISHING FOR CERTIFICATES ADDRESS POISONING DNS POISONING FOOLING THE POSTMAN CHAPTER 4: ARE YOU OWNED? UNDERSTANDING PHISHING SPYWARE SPYWARE CENTRAL COMMON SPYWARE USES ADVERTISING AND MARKETING GOVERNMENTAL MONITORING CORPORATE MONITORING CHILD MONITORING CRIMINAL CRACKING SPYWARE TYPES ADWARE KEYLOGGERS HIJACKERS TROJAN HORSES PHONE DIALERS WEB BUGS SPAMBOTS BOGUS SPYWARE REMOVAL PROGRAMS NOT ON MY MACHINE: HOW YOU GET SPYWARE HOT AND FRESH TO YOUR DOOR SPYWARE VERSUS VIRUSES THE POP-UP DOWNLOAD THE DRIVE-BY DOWNLOAD SYMPTOMS OF A SPYWARE INFECTION ATTACK VECTORS EMAIL BLACKLIST WHITELIST DECEPTION SCHEMES SOCIAL ENGINEERING COUNTERFEIT WEBSITES NAMING NAMES: AN OVERVIEW OF SOME SPECIFIC SPYWARE BROWSER HIJACKERS AND REDIRECTORS COOLWEBSEARCH XUPITER SUBMITHOOK ADWARE TRACKERS AND POP-UP DISTRACTERS DOWNLOADERGK GATOR ADVERTISING INFORMATION NETWORK BOGUS ADWARE REMOVERS EMAIL RELAY TROJANS AS THE WORM TURNS MULTISTAGE AND BLENDED THREATS JS/QHOSTS21-A SCOB WEBMONEY TROJAN GRAMS – E-GOLD ACCOUNT SIPHONER DEPARTMENT OF ODD EXPLOITS CHAPTER 5: GLOOM AND DOOM: YOU CAN’T STOP PHISHING COMPLETELY WHO IS RESPONSIBLE? PHISH SPOOFED NONFINANCIAL INSTITUTIONS FINANCIAL INSTITUTIONS GOVERNMENT THE INTERNET IS BROKEN MUTUAL AUTHENTICATION IS NOT POSSIBLE THE DOMAIN NAME SYSTEM IS FRAGILE MAJOR INFRASTRUCTURE CHANGES HAPPEN SLOWLY THE CREDIT SYSTEM IS BROKEN TIME OUT MARKETING, MARKETING, MARKETING WHY PHISHING WON’T GO AWAY MAN-IN-THE-MIDDLE ANSWERS? EDUCATING USERS USING PROSECUTION AS A DETERRENT USING THE PROFIT MOTIVE CHAPTER 6: HELPING YOUR ORGANIZATION AVOID PHISHING INTERACTING WITH CUSTOMERS STANDARD CUSTOMER COMMUNICATION POLICY EMAIL AUTHENTICATION SYSTEMS WEB JAVASCRIPT CROSS-SITE SCRIPTING FLAWS USER-AGENT STRINGS CLIENT-SIDE SOLUTIONS AUTHENTICATION TWO-FACTOR AUTHENTICATION EUROPEAN SOLUTIONS TOOLBAR MANIA SPOOFSTICK EARTHLINK TOOLBAR EBAY TOOLBAR GOOGLE NETCRAFT MUCH, TOO MUCH, TOOLBAR SERVER-SIDE SOLUTIONS IMAGES NEAR-MISS DOMAINS AND WEBJACKING SHARING INFORMATION IETF DRAFT PROPOSALS INFO GROUPS ANTI-PHISHING WORKING GROUP DIGITAL PHISHNET INTERNET CRIME PREVENTION & CONTROL INSTITUTE LAW ENFORCEMENT AND FEDERAL AGENCIES APRES-PHISH IDENTITY-SCORING SYSTEMS FAIR ISAAC ID ANALYTICS PROBLEMS WITH IDENTITY-SCORING SYSTEMS OTHER FRAUD-ALERTING PRODUCTS INTRUSION DETECTION SYSTEMS HONEYPOT SYSTEMS HONEYPOT ISSUES DEALING WITH CUSTOMERS DUE DILIGENCE PRIVACY AND THE LAW GRAMM-LEACH-BLILEY SARBANES-OXLEY THE DATA PROTECTION ACT AND 95/46/EC HIPAA CHAPTER 7: FIGHTING BACK: HOW YOUR ORGANIZATION CAN RESPOND TO ATTACKS PUTTING TOGETHER AN ATTACK RESPONSE PLAN LIABILITY MONITORING AND AUDITING INCIDENT-HANDLING CAPABILITY COMPUTER INCIDENT RESPONSE TEAM CONDUCTING AN INVESTIGATION EVIDENCE EVIDENCE ADMISSIBILITY FORENSIC EVIDENCE HANDLING AND PRESERVATION PHISHING RESPONSE FIND THE BAD SERVERS FIND OUT WHO’S RESPONSIBLE TAKE THEM DOWN QUICKLY TAKEDOWN SERVICES DEALING WITH ISPS OFFSHORE ISPS THE ICPCI PROCESS PREPARATORY PHASE ATTACK DETECTION PHASE TAKEDOWN PHASE POST-ATTACK PHASE CHAPTER 8: AVOIDING THE HOOK: CONSUMER EDUCATION COMPUTER SAFETY CHOOSE SAFER SOFTWARE OPERATING SYSTEM PEER-TO-PEER OTHER SOFTWARE MAINTAIN SAFER SYSTEMS BACK UP USE PASSWORDS AND RENAME KNOWN USER ACCOUNTS DON’T LOG IN AS AN ADMINISTRATOR INSTALL PATCHES TURN OFF SERVICES YOU DON’T NEED INSTALL A FIREWALL TEST YOUR DEFENSES FIXING WINDOWS-SPECIFIC PROBLEMS PULL THE PLUG PASSWORDS MAKING GOOD PASSWORDS REMEMBERING YOUR PASSWORDS SPECIAL NOTE ABOUT COMPROMISED SERVERS INTERNET SAFETY THE RULES DON’T BELIEVE EVERYTHING YOU READ WHAT INFORMATION IS AVAILABLE? HOW MUCH DO YOU TRUST THE INFORMATION? CHAT FINANCIAL SAFETY DON’T GIVE OUT YOUR PERSONAL INFORMATION CHECK YOUR STATEMENTS BE CAREFUL WITH CHECK CARDS AND DEBIT CARDS AUDIT YOUR CREDIT REPORT OPT OUT SECURITY FREEZE PREAPPROVED CREDIT OFFERS CONVENIENCE CHECKS CLOSE UNUSED ACCOUNTS PHYSICAL SECURITY KEEPING YOUR MAIL IN YOUR MAILBOX SHREDDING THE EVIDENCE IDENTIFYING THE WARNING SIGNS OF IDENTITY THEFT CHAPTER 9: HELP! I’M A PHISH! CONSUMER RESPONSE IF YOU’VE BEEN PHISHED LOG WHAT HAPPENS CHANGE YOUR PASSWORDS CLOSE ACCOUNTS GET A CREDIT REPORT RECOVERING FROM IDENTITY THEFT SEND LETTERS TO EVERYONE CONTACT THE CREDIT BUREAUS FILL OUT THE IDENTITY THEFT AFFIDAVIT FILE A POLICE REPORT CONTACT THE FEDERAL TRADE COMMISSION SUPPOSED CREDITORS TALK TO THE POST OFFICE GET IN TOUCH WITH THE SOCIAL SECURITY ADMINISTRATION TALK TO THE DEPARTMENT OF MOTOR VEHICLES CONTACT THE PASSPORT OFFICE REPORTING PHISHING SCAMS (EVEN WHEN YOU’RE NOT A VICTIM) REPORTING A PHISHING SCAM WHEN YOU HAVE THE EMAIL REPORTING A PHISHING SCAM WHEN YOU DON’T HAVE THE EMAIL MAINTAINING HOPE