Monday, October 02, 2006
According to Wikipedia "phishing is a criminal activity using social engineering techniques. Phishers attempt to fraudulently acquire sensitive information, such as passwords and credit card details, by masquerading as a trustworthy person or business in an electronic communication. Phishing is typically carried out using email or an instant message, although phone contact has been used as well. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, and technical measures."
A useful summary of a Harvard and Berkeley report into phishing attacks can be found on SEO Chat and it makes for interesting reading. Despite being academic research, the report has real-world implications as people will only buy from, or give their details to, websites they trust.
Phishing attacks are so common place and successful because the criminals behind such sites are one step ahead of many of us psychologically. Read the article and see how vulnerable you are.