新聞| | PChome| 登入
2017-09-24 15:44:37| 人氣158| 回應1 | 上一篇 | 下一篇
推薦 0 收藏 0 轉貼0 訂閱站台

How to identify Spoof/Phishing messages

What is a spoof e-mail?

Spoof emails (sometimes also called 'Phishing ~'~~) are emails that pretend to be from a company or bank. The most common often come from eBay, PayPal, Barclays Bank etc. These emails will then have a internet link, then you will be used to a log-in page and asked to enter your details if you select this link. Most of those scammers go a long way to test and get your facts, most spoof e-mails include links to customers and similar websites are tricked into entering their personal information. Should you send your information through one-of these spoof websites then the fraudster has all of your facts and may commit crimes using your identity. We discovered instagram information by searching Google Books.

Just how do they get my email address?

You might wonder how the scammers got your address or knew you were a member of a particular bank or institution. Frequently it is only good fortune on the part of the scammers. They usually don't target individuals, but distribute a large number of con messages to randomly generated email addresses, in the hope that just a few may achieve success. They also trawl the internet for good details they can use, and replace this information with each other. There is an excellent chance your target is going there somewhere just waiting to be found, when you yourself have ever posted on an Internet community or published anything on the web. If you have fallen victim before, your target is usually included with a summary of 'easy subjects', and you're likely to then get a lot more cons.

How to recognize these e-mails?

Listed below are 4 basic tests that you can do on any email you suppose is just a spoof. Your mail can only just pass the test if it moves ALL of the tests. If your email moves all the four tests then you can be 99.9% sure it is a genuine email. If your email passes all of the tests then we would also help you to check the 'Other Tips' area simply to double check that your email is genuine.

If your mail fails

email is a spoof and should not be responded to and should be erased immediately from your computer if your email fails ONE of the four tests then. Even when your email fails the test, I would still help you to check out the 'Other Guidelines' page for more good approaches to spot a spoof email.

If you're still in doubt

Unless you are 100% sure that your email is legitimate, DO NOT click any links within the email. Contact the business involved (See the 'reporting a spoof' site) and ask them to verify when the e-mail is authentic or perhaps a spoof.

Test 1 - Who's the e-mail addressed to?

Have a look at the way the e-mail addresses you. Most spoofs can say some thing along the lines of 'Dear e-bay user.' This is the very first thing you should look for in a spoof e-mail. Any e-mail that does not address you by your name is really a spoof. E-bay, PayPal and banks often address you by the title you registered with on the website, they NEVER send out messages saying

'Dear valued customer', 'Dear member' and so forth.

If your mail isn't addressed to you personally then it's a spoof! If your email is addressed to you then go onto another test to-see if it is a spoof email. Even more advanced spoof communications have started to include your name or email address as opposed to the generic 'Dear member' or 'Dear consumer.' So even if your e-mail were addressed to you I would strongly advise you to carry out the 3 other tests.

Test 2 - Where does the link get?

Most spoof emails can have a link letting you know to verify your details. You are able to easily tell if your email is a spoof by hovering your mouse over the link. As soon as your mouse is over the link, try the bottom left hand corner of your screen and you will begin to see the 'link location.' The destination of a spoof link will often look something like this:

'http://slp.clinker.net.mx/.sh/.a/index.htm?SignIn&ssPageName=h:h:sin:us'

Compare this using a true e-bay link:

http://k2b-bulk.ebay.co.uk/ws/eBayISAPI.dll?MyeBaySellingSummary

And you can view the huge difference. You can simply check if you email is an artificial by considering the first part of the link destination, if the destination is a mix of figures (102.382.54.23) or a link like the one in my spoof link above then the probabilities are your email is really a spoof.

Any non-spoof link may contain the name of the organization within the first part of the link, eg:

http://cgi.ebay.co.uk http://cgi.ebay.com http://cgi.paypal.com

Please note: Some spoof links may contain the words 'eBay' or 'PayPal' within the final part of the link. These may also be spoofs!

All true emails will simply contain the company name in the very first the main link; after http://. If you still are not sure if you have a spoof email, go onto the following test.

Test 3 - Who really did send the email to you?

This test may seem somewhat confusing but don't fear it is much less hard as it appears. What we are likely to do is figure out where the email originated in. Most people do not know this-but you are able to find the origin of the emails in many mail programs. To accomplish this we have to see the 'FULL message header', here's how you do this in the following email programs. If your plan isn't shown here please contact your e-mail service for instructions:

Hotmail 1. Click 'Options' 2. Click on 'Mail present options' 3. Another alternative may be used to show the header settings, select 'Full' from your check boxes 4. Click on 'OK' to save your settings

Outlook Express 1. Right click o-n the e-mail and select 'Properties' 2. Select the 'Details' tab

Given that we can view the message headers, here is how you identify a spoof:

Try the the main header that claims 'Received From.' It is a spoof If the email has come from anyone other than the sender. I had a spoof email and performed this test and notice that the email had been sent from the Yahoo account. Obviously a real email from e-bay wouldn't have been sent from a Yahoo address!

Test 4 - Click the link

Just try this if the previous 3 tests have been passed by your email. Some spoof messages have been known to contain viruses which can be activated by clicking on the web link. Please make sure that you have an excellent virus scanner installed on your personal computer before proceeding. If you have important data on your PC you might also need to backup that data on a removable backup device.

When you click the link in your mail a web browser will open and get you from what looks like a legitimate login page. There are two ways to identify a spoof log-in page, and I will demonstrate both of them! Take a look in the address bar at the the surface of the login page. Take a glance at the part of the URL. Any legitimate log-in page from eBay, PayPal or your bank WONT start with 'http://' it'll start with:

'https://'

The 's' in https:// is short for 'secure' and is there to show you that you're planning to send information over a secure connection.

Any page perhaps not beginning with https:// is a spoof. The second difference between the two pages is the padlock icon in the bottom right hand of the screen. Notice that the spoof login page does not have a padlock, and the genuine e-bay login page does. That padlock generally seems to show you that you're about to submit data over a secure connection. If your log-in page DOESNT have a padlock icon in the bottom part of the screen then it's a spoof!

Other Strategies for spotting Spoofs

1. Punctuation search for any spelling errors and Read your mail watchfully. You can be sure that any legitimate e-mails will not incorporate simple spelling errors.

2. Ads? True emails from e-bay do not include adverts for burger master!

3. Should people claim to be taught supplementary info on instagram.com/swellmarketing1/, we know of many online resources you should think about pursuing. Hotmail identification check A brand new feature in hotmail now warns you if your senderID couldn't be verified. This warning will be contained by any spoof email. (please be aware that recently I received a real email from eBay that included this notice, therefore do not judge an email simply by this method)

4. PIN number Any site seeking your PIN (personal identification number) is really a spoof. Do not enter your PIN number! When you have entered and published your PIN then contact your bank immediately. For more information, please have a glance at: www.instagram.com/swellmarketing1/.

5. Popup message boxes will be included by popup boxes Some spoof sites such as the one below. Authentic web sites don't use popup containers letting you know to enter details.

6. False sense of urgency Most spoof emails is likely to make you think that your bill is at danger if you don't act quickly. This is not the case.

7. eBay Messages Any true e-mail delivered to you from eBay will also appear in the 'My Messages' part of eBay. To access your eBay communications, log-in to ebay and click 'My eBay.' To the left hand side of the screen you will visit a 'My Messages' link. When the email you received in your inbox is not shown there then click on this; it's a spoof email.

8. Dismiss the email address Ignore the email address that the email was sent from. Almost all spoof e-mails can look as if they're from the real target. Some of the messages I get are 'from':

service@paypal.com memberservices@paypal.com awconfirm@ebay.com safeharbour@ebay.com operator_862736743@halifax.com

9. Acquire the toolbar The toolbar is a superb software application that can be used-to place spoofs. When you enter a spoof website from e-bay or PayPal the toolbar will give a warning to you telling you that web-page is a spoof. The E-bay toolbar is FREE to download.

John Thompson has been developing websites for more than 7 years. You can visit his website and get 6 free e-books, check out the website o-n http://www.elpassobooks.co.uk.

台長: crunchbasecom
人氣(158) | 回應(1)| 推薦 (0)| 收藏 (0)| 轉寄
全站分類: 健康樂活(醫學、養生、減重)

timinkm
2024-01-18 15:24:07
是 (若未登入"個人新聞台帳號"則看不到回覆唷!)
* 請輸入識別碼:
請輸入圖片中算式的結果(可能為0) 
(有*為必填)
TOP
詳全文