December 02, 2008

phishing

Last modified: Monday, July 28, 2008 

(fish´ing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information.

For example, 2003 saw the proliferation of a phishing scam in which users received e-mails supposedly from eBay claiming that the user’s account was about to be suspended unless he clicked on the provided link and updated the credit card information that the genuine eBay already had. Because it is relatively simple to make a Web site look like a legitimate organizations site by mimicking the HTML code, the scam counted on people being tricked into thinking they were actually being contacted by eBay and were subsequently going to eBay’s site to update their account information. By spamming large groups of people, the “phisher” counted on the e-mail being read by a percentage of people who actually had listed credit card numbers with eBay legitimately.

Phishing, also referred to as brand spoofing or carding, is a variation on "fishing," the idea being that bait is thrown out with the hopes that while most will ignore the bait, some will be tempted into biting.

Other forms: phish (v.)

See the All About Phishing page in the "Did You Know? section of Webopedia for more information, including examples, of phishing.

Also see "Defend Yourself Against Identity Theft" in Webopedia's "Did You Know...?" section.

Sponsored listings

Anti-Phishing Services - Get phishing site detection and shut down services that end phishing threats quickly and at the best price.

  Related Links

DNS-Based Phishing Attacks on The Rise
This EnterpriseNetworkingPlanet article discusses how phishing fraudsters are using a pair of DNS exploits to help give them the illusion of credible domains, the latest ploy to dupe people into handing over their sensitive information.

Open Networks Today
Networking news moves at a fast pace, and Open Networks Today lets you keep up with it. Open Networks Today offers its readers the ability to control how news is presented through customizing content filters, discussions, and news feed links.

Webopedia's "Did You Know...All About Phishing"
An e-mail scam is a fraudulent e-mail that appears to be from a legitimate Internet address with a justifiable request — usually to verify your personal information or account details.

Related Categories

Computer Law

Electronic Mail

Ethics

Security

Related Terms

e-mail

e-mail spoofing

IM

security

SMiShing

social engineering

spam

spear phishing

Web page

phishing Products :


Top Store Offers:
Amazon  29.99Block access to your sensitive data and stop unauthorized transmission of your account numbers, addresses, email and chat addresses Anonymous surfing ...
NothingButSoftware.com  7.95icSpyware Suite provides daily protection from Spyware, phishing scams and identity theft! Spyware shadows and records every keystroke looking for yo...
AllSoftwareSales  19.99Trend Micro® PC-Cillin Internet Security 2005 is an Antivirus/Diagnostic Internet Security tool that protects your PC and home network. OEM CD only.
Kaspersky Lab  59.95Kaspersky Anti-Virus provides classic anti-virus protection from all types of malicious programs. You can be sure that your computer and your data is ...
Dell SMB  19.45New threats emerge every day. Spam, phishing, viruses, and hackers can steal your valuable data and disrupt your network. Without constant updates, yo...

Compare all matches:
9 Store Offers
Security Solutions





On the Forums

Visit the Forums »

Partners

  • Be a Commerce Partner