New offline phish technique targets noobs & luddites

Who is least likely to recognize a phish when he sees one? A noob or a luddite right? As more and more people get online, more and more people are getting savvy about phish scams. The only people still likely to be highly vulnerable are those people who still don’t have internet woven into their daily life. We all know someone like this, and if you are reading this blog you are probably NOT one. These folks hate going online and they check their email once a week or so, if at all. They delete all email unless someone phones them and tells them “Look for an email from me.” They are clueless about the internet and tend to believe things are what they seem to be. Ideal victims, but how would you push a phish in their face in the first place?
Continue reading New offline phish technique targets noobs & luddites

Avoid the phish

rotting_phishA old school phish typically involves an Instant Messenger or email message asking you to click a link. This tried and true technique uses bogus links, and this article shows you how to detect them. Newer phishes bite you at a different level. They feed you “good” links but then they cause the good links to turn into bad ones at the network level where you normally don’t go. These phishes will work even if you manually type the good URL into a completely virgin browser. About the only way to be safe from these is to protect your computer overall. The section where I describe bogus URL’s may seem a little long, but consider that it is easier for human brains to spot patterns than it is to talk about them. An accurate and complete description is necessary so your brain can learn what to look for. Don’t sweat it — with just a little practice you’ll be able to sniff a bogus URL in a matter of seconds just like an IT security pro.

Continue reading Avoid the phish