Phisherman are targeting Google software:
new threat forces computers to install faked Google software via
Instant Messengers, which then goes phishing.
If you have been in a coma for the last few years, phishing involves
criminals setting up or send emails about fake sites that look exactly
like they came from legitamate sources. These sites usually
attempt to collect personal information such as Login and Passwords of
oooh, I don't know… say a PayPal or bank
account.
I get these phishing emails nearly everyday. “How can you tell
its a phishing account?” you ask. Well for one of my email
accounts I don't even have a paypal account set up, and it receives
repeat emails about my “paypal” account is going to expire, or my
paypal account had someone added to it. Another thing is that
they companies such as eBay, PayPal, and banks won't ask you to
login. If they do, call the actual eBay service Rep and see what
is going on DO NOT GO THERE FROM AN EMAIL LINK.. EVER.
Another thing you can do is click the “Show Original Message” button or
link on the opened email. This will display the innerworkings of
the email. It will display the IP address where the email
actually came from. With Arin.net you can determine the location
of any IP address. And with a tool called SAM SPADE you can get
even more information on IP addresses and DNS names. Doing a
simple “traceroute” command may also give IP address if all you have is
the DNS name and want the IP.
If you do go to the Phisher site, first of all be careful, some
of these sites are exploit sites meaning if you system is not patched
and protected it could possibly load malicious code on your
system. Once you get to the site Right-click and “View the page
Source” This will tell you what is really going on with the site in
question.
Ready to actually get the RMF/ISSO job?
Go from reading about the Risk Management Framework to doing it — with the full video course, the books, and a community of GRC professionals taught by Bruce Brown (CISSP, CGRC).
Get the RMF ISSO Foundations course → Browse the RMF & GRC books Join the free GRC community
Leave a Reply