Phishing

1. PHISHING
OMAR NAFFAA ALRASHDI
202621031
NE-7-1

2.  Please don’t use mobile phone during my Leeson.
 Keep calm and be attention with me.
 If you have any question please rise your hand.
Lesson Rules

3. Content
 Definition.
 Types of phishing.
 The goals of phishing.
 Phishing Techniques
 Address obfuscation
 How to identify a phishing e-mail.
 Common messages: Instant Messaging.
 measures Phishing countermeasures.
 Common companies affected by phishing.
 Cycle of phishing.
 Ways to Avoid Phishing.
 Phishing Prevention Exercises. Through the system of granting
permission to users.
 Summary.

4. Definition of phishing
Phishing is the method used to steal personal information
through spamming or other deceptive means.

5. Types of phishing.
 Malicious links.
 Spear Phishing.
- E-mail spoofing fraud attempt that targets a specific
organization.
 Clone phishing.

6. The goals of phishing.
 Steal personal information.
 Steal bank account.
 Steal company data.

7. Phishing Techniques
 Address obfuscation.
 Email / Spam.
 Instant Messaging.
 Malware Phishing.
 Link Manipulation.
 Phishing through Search Engines.
 Phone Phishing.

8.  In this way, anglers falsify a site and place it under a
domain name similar to the domain name of the
original site. In this way, the fishers will have the
domain name of the fake site close to the correct
domain name so that it is difficult for the victim to
discover it at first sight.
Address obfuscation

9. Address obfuscation

10. How to identify a phishing e-mail
Spelling
Mistakes
Not specify
your account
name
Phishing Link
No contact
information
Not match to
Google services

11. Common messages: Instant Messaging
Instant Messaging:
It’s a message received
from an unofficial side and
has enticing words ask you
to click the link and fill your
personal information.

12.  All user operations (victim) in this mode through the
web browser become open to a phisher. The reason
for this detection is due to malicious software being
installed on the user's device.
Malware Phishing.

13.  Prevent electronic phishing attacks before they occur
 Create an email account for notifications
Measures Phishing countermeasures.

14. Common companies affected by phishing
Banks Popular Websites Government web sites
Social Media Apps

15. Phishing Cycle

16. Ways to Avoid Phishing.
Keep Informed
about Phishing
Techniques.
Install an Anti-
Phishing Toolbar
Verify a Site’s
Security
Use Firewalls
Never Give Out
Personal
Information
Keep Link Clicking
to a Minimum

17. Rules
 Deny > Allow * Explicit U in list
 Explicit A >Inherited D * implicit U in Group
* Inherited U in Child
17

18. Summary
 Phishing is a techniques used to steal the personal info ,bank
account by or company data by send an Email.
 Three types of phishing : malicious links, spear phishing and
clone phishing.
 Most common phishing techniques are: Email spam, instant
messaging and link manipulation.
 Ways to avoid phishing is by never give out personal Information
and keep Informed about phishing techniques.

19. THANK YOU
Any Questions