Phishing Scam

A Phishing Scam is a social engineering scam where an attacker sends a fraudulent message designed to trick a person into revealing sensitive information to the attacker.

• Example(s):
  • Email phishing.
    • Spear phishing, where the fraudulent message is personalized.
    • Whaling and CEO fraud
    • Clone phishing
  • Voice phishing
  • SMS phishing
  • Page hijacking
  • Calendar phishing
  • …
• Counter-Example(s):
  • a Spam Message.
• See: Social Engineering (Security), Sensitive Information, Ransomware, Security Hacker, AOHell, Phreaking, Malware.

---

---

References

2022

• (Wikipedia, 2022) ⇒ https://en.wikipedia.org/wiki/Phishing Retrieved:2022-12-13.
  • Phishing is a type of social engineering where an attacker sends a fraudulent (e.g., spoofed, fake, or otherwise deceptive) message designed to trick a person into revealing sensitive information to the attacker or to deploy malicious software on the victim's infrastructure like ransomware. Phishing attacks have become increasingly sophisticated and often transparently mirror the site being targeted, allowing the attacker to observe everything while the victim is navigating the site, and transverse any additional security boundaries with the victim. As of 2020, phishing is by far the most common attack performed by cybercriminals, the FBI's Internet Crime Complaint Centre recording over twice as many incidents of phishing than any other type of computer crime. The first recorded use of the term "phishing" was in the cracking toolkit AOHell created by Koceilah Rekouche in 1995; however, it is possible that the term was used before this in a print edition of the hacker magazine 2600. The word is a variant of fishing, influenced by phreaking, and alludes to the use of increasingly sophisticated lures to "fish" for users' sensitive information. Attempts to prevent or mitigate the impact of phishing incidents include legislation, user training, public awareness, and technical security measures. Phishing awareness has become important at home and at the work place. For instance, from 2017 to 2020, phishing attacks have increased from 72% to 86% among businesses.

---