My work

Threat (Stealing money) : 

Threat (Stealing money) The nature of threat(Phishing) What is a phishing attack? Phishing" is an Internet scam which uses "spoofed" (forged) e-mails and impersonated websites, designed to look like the e-mails and websites of well-known legitimate businesses and institutions, in order to deceive recipients into divulging sensitive information, such as account usernames and passwords, bank account numbers, credit card numbers, social security numbers, PINs, etc. Because the e-mails look genuine, recipients respond to them and become victims of identity theft and other fraudulent activity.

Statistics for Phishing : 

"In the last year, phishing attacks targeted 57 million Internet users. On average, three to five percent of all individuals who received a phishing e-mail fell victim to the fraud." (Source: Verisign, June 28, 2004) According to an article in TechNewsWorld on August 5, 2004 by John P. Mello Jr.: Phishing attacks increased 19 percent in June over May, according to a report released by the Anti-Phishing Working Group. Of the 1,422 new unique attacks, 92 percent of them used forged, or "spoofed," e-mail addresses. According to a report by Zero Spam Network Corporation, the financial services sector remains the top target of phishers, garnering more than 1,000 of the new unique attacks. Citibank alone amassed 492 attacks, a 32 percent jump from the previous month. According to MailFrontier in 2003 over 40% of recipients fell for a Citibank Email Phishing Scam. According to Gartner, between May 2004 and May 2005, roughly 1.2 million U.S. computer users suffered Phishing losses valued at $929 million. Statistics for Phishing

Statistics for Phishing : 

Statistics for Phishing

Slide 4: 

An example of a phishing e-mail:

Slide 5: 

How to avoid a phishing threat? Be highly suspicious if the e-mail asks for numerous items of personal information such as account number or social security number. If in doubt, call the bank to check! Don’t use links in an email message to load a web page, Instead, type the URL into your web browser. Check if your anti-virus program blocks phishing sites, or consider installing a web browser tool bar that alerts you to known phishing attacks. Check your bank accounts regularly (including debit and credit cards, bank statements, etc.), to make sure that listed transactions are legitimate.

Links to the source of material : 

Links to the source of material www.phishtank.com/stats/2006/10/ http://www.spamfo.co.uk http://www.antiphishing.org http://www.scientic.com/security/phishing.html http://en.wikipedia.org/wiki/Phishing