Phishing

Phishing is old and evergreen attacking method to steal confidential information like passwords, credit card numbers etc. With this attack, an attacker creates a page that look likes original page and make us to believe it is genuine. If we cannot identify the difference, we may enter confidential information.

How to protect ourselves from these types of attacks.

Which website is this?

A fake page which looks like Gmail page

Everybody is very much familiar with this design. Whenever one sees a page like this, his brain says it’s a Gmail page because of more belief in visual stuff.

Now let’s have a look to Original Gmail page

Original Gmail page

Observe these two images very carefully. So what are the differences?

• Protocol: https in the original page while the protocol is missing in the fake page.
• SSL (lock symbol):  SSL is present in the original page which is not there in the fake page.
• Correct Domain Name: In address bar i.e. account.google.com in the original page where in fake page have some other domain.

Hope you will not enter your confidential information in a fake page from now.