Domain Name And Internet Articles

Phishing, Fraudulent, and Malicious Websites

Whether we like it or not, we are all living in the Information Age. We have nothing left but adapt to rapidly developing information technology, no matter who we are and what we do for living.

The Internet, in particular, means for us boundless opportunities in life and business – but also lots of dangers unheard of just a decade ago. We should be aware of these dangers if we want to use the huge potential of the Internet and to avoid the hazards it brings us.

Warning: There are Websites You'd Better Not Visit

Phishing websites

Thanks to authors of numerous articles on this topic, "classic" phishing technique is relatively well known. This scam involves setting bogus websites and luring people to visit them, as a rule, by links in emails. Phishing website is disguised to look like a legitimate one -- of a bank or a credit card company, and users are invited to provide their identifying information. Sites of this kind are used solely to steal users' passwords, PIN numbers, SSNs and other confidential information.

At first phishing consisted only of a social engineering scam in which phishers spammed consumer e-mail accounts with letters ostensibly from banks. The more people got aware of the scam, the less spelling mistakes these messages contained, and the more these fraudulent websites resembled legitimate ones. Phishers are getting smarter. They eagerly learn; there is enough money involved here to turn criminals into earnest students.

Keyloggers and Trojans

Since about November 2004 there has been a lot of publications of a scheme which at first was seen as a new kind of phishing. This technique includes contaminating a PC with a Trojan horse program. The problem is that this Trojan contains a keylogger which lurks at the background until the user of the infected PC visits one of the specified websites. Then the keylogger comes to life to do what it was created for -- to steal information.

It seems that this technique is actually a separate scam aimed at stealing personal information and such attacks are on the rise. Security vendor Symantec warns about commercialisation of malware -- cybercriminals prefer cash to fun, so various kinds of information-stealing software are used more actively.

Fraudulent websites are on the rise

Websense Security Labs -- a well-known authority in information security -- noticed a dramatic rise in the number of fraudulent websites as far back as in the second half of 2004. These sites pose as ones for e-commerce; they encourage users to apply for a reward or purchase something, of course never delivering the product or paying money. The most popular areas for such fraud are online pharmacies, lottery scams, and loan / mortgage sites. Experts predict there will be more fake merchants in future and their scams will become more sophisticated.

A Hybrid Scam

In April Panda Software warned Internet users of a new particularly brazen scam aimed at stealing confidential information. The technique used here looks like a hybrid between phishing and a fraudulent website.

Panda Software identified several websites offering cheap airline tickets which in fact weren't selling anything; the aim was to cheat users out of credit card details.

This scam is very simple; the thieves simply wait until some unsuspecting user who is searching for, say, airline ticket offers, finds their site offering dirt-cheap airline tickets. Really pleased with himself and looking forward to the trip, the user fills in the form, entering his credit card number, expiry date and verification value (CVV).

As soon as these details have been entered, an error page appears; it tells the user that the transaction has been unsuccessful, and offers instructions on how to pay for the ticket by postal money order. So the user may well be fooled twice. He loses his credit card details, putting them right into the hands of cyber-crooks, and then loses money, if decides to buy the ticket by money order.

Of course, these sites have already been disabled, but who knows whether (or better to say when) other ones will appear again, this time offering all kinds of products.

Malicious websites are especially dangerous. Cybercriminals create them exclusively to execute malicious code on the visitors' computers. Sometimes hackers infect legitimate sites with malicious code.

Bad news for blog readers: blogs can be contaminated, too. Since January, Websense Security Labs has discovered hundreds of these "toxic" blogs set by hackers.

When unsuspecting users visit malicious sites, various nasty applications are downloaded and executed on their computers. Unfortunately, more and more often these applications contain keyloggers--software programs for intercepting data.

Keyloggers, as it is clear from the name of the program, log keystrokes --but that's not all. They capture everything the user is doing -- keystrokes, mouse clicks, files opened and closed, sites visited. A little more sophisticated programs of this kind also capture text from windows and make screenshots (record everything displayed on the screen) – so the information is captured even if the user doesn't type anything, just opens the views the file.

In February and March 2005, Websense Security Labs researched and identified about 8-10 new keylogger variants and more than 100 malicious websites which are hosting these keyloggers EACH WEEK. From November of 2004 through December 2004 these figures were much smaller: 1-2 new keylogger variants and 10-15 new malicious websites per week. There is by all means a disturbing tendency--the number of brand-new keyloggers and malicious website is growing, and growing rapidly.

What a user can do to avoid these sites?

As for phishing, the best advice is not to click any links in any email, especially if it claims to be from a bank.

Opening an attachment of a spam message can also trigger the execution of malicious program, for example a keylogger or a keylogger-containing Trojan horse.

As for fraudulent websites, maybe buying goods only from trusted vendors will help -- even if it is a bit more expensive.

As for malicious websites... "Malicious websites that host adult entertainment and shopping content can exploit Internet Explorer vulnerabilities to run code remotely without user interaction."(a quote from the Websense's report). What can a user do about it? Not much, but avoiding adult sites and buying only from known and trusted online stores will reduce the risk.

Hackers also attract traffic to malicious websites by sending a link through spam or spim (the analog of spam for instant messaging (IM). So a good advice never follow links in spam is worth remembering once more.

Alexandra Gamanenko currently works at Raytown Corporation, LLC -- an independent software developing company. The company's R&D department created an innovative technology, which disables the very processes of information capturing -- keylogging, screenshoting, etc. It makes the company's anti-keylogging software truly unique: it doesn't detect keyloggers or information-stealing Trojans one by one -- they all simply can't work.

Learn more -- visit the company's website http://www.anti-keyloggers.com

Other Article Sites

findabook.com  moneycd.info  a-mortgage.info   about-lemon-laws.info  aboutstudentloans.info
all-about-publishing.info  auctions-articles.info  bestcollege-university.com  bestispconnection.com
biblefolder.com  blogger-website.com  books-used.info  brokers-guide.info  buywindows.info  cable-dsl.info
career-miner.com  carpel-tunnel.info  cashinaflash.info  cashloanreviews.info  casinobell.com  chat-house.info
clearmycredit.info  collegeloantips.info  crones.info  depression-articles.info   dirnic.net  dishguides.info
divers-below.com  expodog.info   financewizz.com  fire-insurance.info  getgood.info  handleit.net   it-idea.info
health-supplies.info  hosting-right.com  insidealert.com  insurance-facts.info  jobs-employment.info
justgood.info  lookgold.net   lowcost-travel.info  money-source.info  myhostzone.info  numisblog.com
peoplesearchfinder.info  pr-articles.info  realeas.com   refinancing-guides.info  spyware-remove.info
telelot.info  the-law.info   toppaid.info  travel-deals.info  travelcorrect.com  wedding-guide-site.com
your-blog.info  your-credit.info

MORE ARTICLES:

General Pointers And Precautions Of Buying An Expired Web Domain
As every transaction that involves the transfer of an expired web domain is unique and special, it is quite difficult and strenuous to provide a list of advisories and precautions that can help novice expired domain name investors. Here are some common pointers and precautions that provide an air of safety and security while dealing with expired web domain.

The Wonderful World of Domain Flipping-Flipping Expired Domains to Your Advantage
Domain flipping is an exciting and a promising technique of making your expired domain a successful money earner, as well as a stable income generator There is lot to learn from domain flipping and its wonderful principles

Making Your Expired Domain an Enduring Income Creator - Creating the Magic of Expired Domain Gains
Your expired domains could be the treasure house of unlimited and continuous internet wealth that eventually may create amazing expired domain gains An expired domain is also a future and potential weapon capable of setting up an online money making machine

Available Domain Names - 3 Reasons To Buy An Existing Domain Name
When the time comes to set up your own internet business one of your first thoughts is to buy a domain name to establish a web site for your new business You may spend a lot of time dreaming up possible names and testing their availability but there is another option you should consider -- buying an existing domain name

Internet Domain Registration – Top 10 Most Frequently Asked Questions on Domain Name Registration
Here are the top ten most frequently asked questions regarding on Internet domain name registration:Q1. Which characters are allowed in Internet domain names?A: For normal ASCII domain names, the letters a-z, the numbers 0-9, and one special character, the hyphen or dash "-".

Using Expired Domain Software To Grab An Excellent Expired Domain Name
In practice, grabbing a good expired domain name is a cumbersome and difficult exercise. Grabbing an excellent expired domain name not only needs an extra effort but also a quick reflex and lightening action to beat the online competition. To make things easier and to quickly find expired domains, you will need to find a way or method that helps grow in the expired domain name business. In this regard, good and efficient expired domain software comes very practical and handy. A piece of expired domain software is also a useful tool that can provide you that extra edge to your business efforts.

Learning More About Expired Web Domain Expiry And Deletion Patterns
Why is it important to learn more about expired web domain expiry & deletion pattern Read on to find out more

Free Duplicate Content and Expired Domain Names Tools Offered by Internet Marketing Leader Virante
Virante will continue to add a new free tool each week through the remainder of 2006.

Domain Name Promotion And Web Site Design/SEO
If you do not have one million dollars in your pocket, you might find reading what I have to say worth a moment of your time.

Turning Your Expired Domain Into a Profit Making Machine-Domain Parking Ideas
It is so common to see a registrar?s parking page cropping up in your browser window, when you type in a domain name to check what is on the site In fact, it could be a sheer wastage of what is possibly a good expired domain name

Nexx Cuts Price on .com Domain Names Web Host Offers Exceptional Value on Domain Names
Nexx Online Inc., an innovative North American web host and ICANN Accredited domain name registrar, today cut the price of their .com, .net, .org, .info and .biz domain names to only $7.95 per year.

Having a Domain Name And Web Site Gives Your Business The Key To The Door
Just like all things in life, the ways to run a business are rapidly changing and evolving. The potential involved with having a domain name/web site is staggering to say the least.

Domain Name Investment Pays - Says Domain Name Expert John Motson in His New Book
"Domaining Manifesto" a new book by John Motson, professional domainer and author of DnXpert.com, reveals key strategies to register, manage, negotiate, buy, sell, protect and monetize internet domain names.

Domains: Buying an Existing Domain Name Vs a New Domain Name
No one can deny that the Internet is here to stay and that businesses who do not embrace the internet are going to struggle in the coming years. With the Internet and Search Engines reaching a new level of maturity, I have noticed in their rankings that they are beginning to put more and more weight on the age of the domain in their index and because of this we have now reached a crossroad for many businesses to evaluate whether they are better off buying an existing domain versus registering a brand new domain. But Buyer Beware!