1 / 31

Phishing

Phishing. Dennis Schmidt, CISSP Director, Office of Information Systems HIPAA Security Officer UNC School of Medicine. Phishing. Phishing is e-mail fraud where the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients.

blade
Download Presentation

Phishing

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Phishing Dennis Schmidt, CISSP Director, Office of Information Systems HIPAA Security Officer UNC School of Medicine

  2. Phishing • Phishing is e-mail fraud where the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. • Messages appear to come from well known and trustworthy Web sites such as: • PayPal • eBay • Amazon • Major banks

  3. Note the difference between the URL Label and the Actual URL

  4. Fake Web Site

  5. Real Web Site

  6. Notice the Difference

  7. Dots, not slashes after .com .info not .com Fake Site

  8. Bad password still brings you to this page

  9. Real Site Slashes after .com

  10. Bad password gives you this error! That’s good!

  11. Protect Yourself from Phishing • Be suspicious of any unsolicited e-mail. • Never provide sensitive information to their query. • Check it out from second source (Telephone, etc.) • Don’t use the phone number provided in the e-mail. • Misspellings, bad grammar, etc., should be clues. • Look out for link names that don’t match actual link addresses. • Remember: Your bank will not ask you to verify that your account information is still accurate. • If it does, you need to find a new bank!

  12. Questions?

More Related