Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails...

9
PHISHING Controllers Meeting – May 18, 2017

Transcript of Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails...

Page 1: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

PHISHINGControllers Meeting – May 18, 2017

Page 2: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents
Page 3: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

PHISHING

• What it is

• Why it’s a problem

• What you can do to protect yourself

Page 4: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

PHISHING

What it is…The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as usernames, passwords and credit card numbers.

Why it’s a problem…• The most effective and widely used tactic by cyber criminals

to steal login credentials• Single portal (myBYU) to access a wide array of applications

and data. Protected only by password.• Difficult to prevent• Compromised NetIds are difficult to detect

Page 5: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

EXAMPLE 1

https://www.cognitoforms.com/Krence/SignIn

-Misspelled or uncommon words-Poor grammar-Unknown or wrong names/titles-Just doesn’t quite fit BYU lingo

“Passsign”

Page 6: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

EXAMPLE 2mailto:[email protected]

byucentralauthentication.onlinewebshop.net/caslogin.php

Hmmm…Something smells

Phishy here…

Page 7: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

PHISHINGWhat to do to protect yourself (and BYU)…• Be suspicious of emails you do not expect or receive from an unknown sender

• Know how to recognize a phishing attempt

• Forward any suspicious emails to: [email protected]

• Enroll in DUO two-factor authenticationduo.byu.edu

“O be wise; what can I say more?”

http://duo.byu.edu/
Page 8: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

Questions?

Page 9: Phishing - infosec.byu.edu · PHISHING What it is… The fraudulent practice of sending emails purporting to be from ... by connecting to your phone (landline or mobile) and prevents

PHISHINGControllers Meeting – May 18, 2017


PHISHING By, Himanshu Mishra Parrag Mehta. OUTLINE What is Phishing ? Phishing Techniques Message Delivery Effects of Phishing Anti-Phishing Techniques.

PHISHING By, Himanshu Mishra Parrag Mehta. OUTLINE What is Phishing ? Phishing Techniques Message Delivery Effects of Phishing Anti-Phishing Techniques.

UNCLASSIFIED//FOUO DoD Spear-Phishing Awareness Training · Spear Phishing is a GREATER threat!!! Spear Phishing is a highly targeted phishing attempt. The attacker selectively chooses

UNCLASSIFIED//FOUO DoD Spear-Phishing Awareness Training · Spear Phishing is a GREATER threat!!! Spear Phishing is a highly targeted phishing attempt. The attacker selectively chooses

Detecting a Phishing Attack with Phishing Intelligence ... · Detecting a Phishing Attack with Phishing Intelligence Engine (PIE) 1 Phishing Statistics: What Every Business Needs

Detecting a Phishing Attack with Phishing Intelligence ... · Detecting a Phishing Attack with Phishing Intelligence Engine (PIE) 1 Phishing Statistics: What Every Business Needs

Telecommunication Landline

Telecommunication Landline

Landline - Rainbow Rowell

Landline - Rainbow Rowell

Phishing - Sussex Police · ‘Phishing’ is the most common form of cyber-attack. It is defined as ‘the fraudulent practice of sending e-mails purporting to be from reputable

Phishing - Sussex Police · ‘Phishing’ is the most common form of cyber-attack. It is defined as ‘the fraudulent practice of sending e-mails purporting to be from reputable

Gone Phishing, an Anti-Phishing Program Journey€¦ · Gone Phishing, an Anti-Phishing Program Journey Ava Logan-Woods, Information Security Specialist Eshante Lovett, Information

Gone Phishing, an Anti-Phishing Program Journey€¦ · Gone Phishing, an Anti-Phishing Program Journey Ava Logan-Woods, Information Security Specialist Eshante Lovett, Information

Table of Contents - Sutcliffe Insurance · 2020. 3. 26. · 4 Phishing versus Spear Phishing Often, the terms phishing and spear phishing are used interchangeably. However, there

Table of Contents - Sutcliffe Insurance · 2020. 3. 26. · 4 Phishing versus Spear Phishing Often, the terms phishing and spear phishing are used interchangeably. However, there

Mobile Phishing Protection · Mobile Phishing Protection Anywhere Zero-Hour Protection Against the Broadest Range of Phishing Threats for iOS and Android SlashNext Mobile Phishing

Mobile Phishing Protection · Mobile Phishing Protection Anywhere Zero-Hour Protection Against the Broadest Range of Phishing Threats for iOS and Android SlashNext Mobile Phishing

Phishing - Study Mafiastudymafia.org/wp-content/uploads/2015/03/CSE-phishing-report.pdf · Phishing software and computer programs are designed to prevent the occurrence of Phishing

Phishing - Study Mafiastudymafia.org/wp-content/uploads/2015/03/CSE-phishing-report.pdf · Phishing software and computer programs are designed to prevent the occurrence of Phishing

How to Spot Phishing Attacks - MicroAge · How to Spot Phishing Attacks What is Spear Phishing? Like phishing ploys, spear phishing scams are designed to obtain sensitive information

How to Spot Phishing Attacks - MicroAge · How to Spot Phishing Attacks What is Spear Phishing? Like phishing ploys, spear phishing scams are designed to obtain sensitive information

Anti-Phishing Technologydocs.apwg.org/reports/phishing-sfectf-report.pdf1/19/2005 Anti-Phishing Technology 2 The frequency of phishing attacks has increased dramatically in recent

Anti-Phishing Technologydocs.apwg.org/reports/phishing-sfectf-report.pdf1/19/2005 Anti-Phishing Technology 2 The frequency of phishing attacks has increased dramatically in recent

Какво е Phishing? Защита от Phishing

Какво е Phishing? Защита от Phishing

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

SPEAR PHISHING - dandh.com...SPEAR PHISHING VS PHISHING Spear phishing and phishing attacks both leverage impersonation to commit fraud. The difference between the two is that spear

Beetel Landline Phones

Beetel Landline Phones

Combining landline And Mobile phone Samples

Combining landline And Mobile phone Samples

The Human Phishing Firewall - delta-n.nl€¦ · phishing mails. En met schrikbarend veel succes. De explosieve groei van phishing Phishing is uitgegroeid tot een bedrijfstak, of

The Human Phishing Firewall - delta-n.nl€¦ · phishing mails. En met schrikbarend veel succes. De explosieve groei van phishing Phishing is uitgegroeid tot een bedrijfstak, of

Phishing and Anti-Phishing

Phishing and Anti-Phishing

Phishing Spear Phishing - ASSP Region I€¦ · Phishing& Spear Phishing attacks are similar -key differences: •Phishingcampaign -very broad and automated, think 'spray & pray’

Phishing Spear Phishing - ASSP Region I€¦ · Phishing& Spear Phishing attacks are similar -key differences: •Phishingcampaign -very broad and automated, think 'spray & pray’

Building Websites with a Landline

Building Websites with a Landline