Phishing 101

1
Phishing 101
2
(No Transcript)
3
(No Transcript)
4
(No Transcript)
5
(No Transcript)
6
(No Transcript)
7
(No Transcript)
8
(No Transcript)
9
(No Transcript)
10
(No Transcript)
11
(No Transcript)
12
(No Transcript)
13
(No Transcript)
14
C\Documents and Settings\quaglieri_egttracert
200.176.136.136   Tracing route to
cm-net-fln-C8B08888.dynamic.brdterra.com.br
200.176.136.136 over a maximum of 30 hops  
1 1 ms 1 ms 1 ms removed 2 1
ms 1 ms 1 ms removed 3 4 ms 2
ms 2 ms e0.riag.bbnplanet.net removed 4
11 ms 28 ms 9 ms s2-5-12-0.hsa2.stm1.bbn
planet.net 4.0.177.41 5 39 ms 10 ms
39 ms so-6-2-0.mp2.Stamford1.Level3.net
4.68.124.101   6 54 ms 54 ms 42 ms
as-0-0.mp2.Miami1.Level3.net 64.159.3.249 7
42 ms 105 ms 45 ms so-7-0-0.gar1.Miami1.Lev
el3.net 4.68.112.46 8 44 ms 47 ms 43
ms EMERGIA.gar1.Level3.net 4.79.100.34 9
151 ms 164 ms 158 ms So6-1-0-0-grtsaosi2.red.
telefonica-wholesale.net 213.140.36.66 10
181 ms 156 ms 159 ms So7-0-0-0-grtsaoco1.red.
telefonica-wholesale.net 213.140.37.182 11
180 ms 181 ms 180 ms 200.207.252.221 12
176 ms 176 ms 176 ms 200.207.252.221 13
205 ms 180 ms 173 ms 200-153-2-54.bbone.tdata
brasil.net.br 200.153.2 .54 14 179 ms 191
ms 180 ms terra-v-101-dsw2-poa.tc.terra.com.br
200.176.8. 254 15 176 ms 180 ms 180 ms
terra-g-5-0-0-dist2-poa.tc.terra.com.br
200.176 .0.242 16 179 ms 180 ms 177 ms
terra-g-5-0-0-dist2-poa.tc.terra.com.br
200.176 .0.242 17 192 ms 175 ms 175 ms
terra-f-0-0-dist1-mst.tc.terra.com.br
200.176.8 .10 18 176 ms 176 ms 172 ms
terra-f-0-0-dist1-mst.tc.terra.com.br
200.176.8 .10 19 185 ms 187 ms 180 ms
terra-a-1-0-1-dist1-fln.tc.terra.com.br
200.176 .8.34 20 183 ms
cmts1.fln.virtua.com.br 200.247.141.5 21
Request timed out. 22
Request timed out.
15
(No Transcript)
16
(No Transcript)
17
(No Transcript)
18
The Nigerian 419 Scam
19
(No Transcript)
20
(No Transcript)
21
I sent 10,000 toNigeria and allI got was
thislousy tee-shirt!
22
Pharming
23

• Pharming is a DNS based attack
• DNS Servers resolve friendly names like
  yahoo.com to ip addresses like 66.94.234.13
• There are many DNS Servers on the Internet
• The main DNS servers are called Root DNS
  Servers
• The cache of the DNS Server is poisoned to
  point you to a counterfeit website.

24
(No Transcript)
25
Mule Farming
26
From "Eddie Arredondo" lt371cameron_at_m4m.bizgtTo
"Mikko Hypponen" ltmikko.hypponengtReceived from
4koiahot.0o4xb.aol.com (ppp85-140-200-191.pppoe.mt
u-net.ru 85.140.200.191)       by
mx1.f-secure.com (Postfix) with ESMTP id
B58F167CF2       Wed, 17 Jan 2007 235943
0200 (EET)Subject Fw Re Yuo will want this
JobDate Thu, 18 Jan 2007 010125 0400 Yo
Mikko.hypponen! We are a small and relatively
Software Development and OutsourcingCompany
specializing in enterprise application
development, systemintegration, corporate
networks and other software solutions
forbusiness, finance, and for various types of
problems. The companybased in Ukraine but at
this time we open new office in Bulgaria.Weve
earned ourselves a reputation of a reliable and
trustworthypartner working successfully with a
number of West European and NorthAmerican
copmanies and providing them with reliable
softwaredevelopment services in financial,
telecom and media sectors Also weare in search
of new partners.
27
Unfortunately we are currently facing some
difficulties with receivingpayments for our
services. It usually takes us 10-30 days to
receive apayment from your country and such
delays are harmful to uor business.We do not
have so much time to accept every wire transfer
and we can'taccept cashiers checks or money
orders as well. Thats why we arecurrently
looking for partners in your country to help us
accept andprocess these payments faster. If you
are looking for a chance to make an additional
profit you canbecome our representative in your
country. As our representative youwill receive
8 of every deal we conduct. Your job will be
acceptingfunds in the form of wire transfers and
check payments and forwardingthem to us. It is
nota full-time job, but rather a very
convenientand fast way to receive additional
income. We also consider opening anoffice in
your country in the nearest future and you will
then havecertain privileges should you decide to
apply for a full-time job.This is an entry level
opportunity in the field of financial
services.Our financial professionals work with
clients to help them achievetheir many financial
goals such as saving on taxes. We therefore
solicit your assistacne in remitting this money
andfacilitating transactions. If you believe you
would be able toundertake such a task and are
interested in this job, please respondto
uaelectronic2_at_aim.com and send us the following
information aboutyourself
28
1. Your Full Name as it appears on your
resume.2. Education.3. Your Contact Address.4.
Telephone/Fax number.5. Your present Occupation
and Position currently held.6. Your Age Please
respond ASAP and we will provide you with
additional details onhow you can become our
representative. Joining us and startingbusiness
today will cost you nothing and you will b eable
to earn abit of extra money fast and
easy. Should you have any quesitons, please feel
free to contact us at theaddress mentioned
above. Looking forward to hearing from
you. Sincerely, Kerri KnightDirector of
Electronic Co
29
(No Transcript)
30
(No Transcript)
31
(No Transcript)