{"id":186,"date":"2010-11-16T22:16:22","date_gmt":"2010-11-16T15:16:22","guid":{"rendered":"http:\/\/www.jaringankita.com\/blog\/?p=186"},"modified":"2012-07-25T13:58:53","modified_gmt":"2012-07-25T06:58:53","slug":"interesting-phishing-email","status":"publish","type":"post","link":"https:\/\/www.jaringankita.com\/blog\/interesting-phishing-email","title":{"rendered":"[IT Security] Interesting phishing email"},"content":{"rendered":"

You may hear the word “Phishing<\/em>“. Phishing<\/em> is typically used by the thieves to get a user password credential<\/em> such as online banking username<\/em> and password, email, etc.. The manner in which it was all sorts, through this article I will show one phishing emails<\/em> I ever could. I would invite the readers to be careful in an email<\/em> that looks “WOW” to me<\/p>\n

 <\/p>\n

A few weeks ago I received an email<\/em> message saying that I received sizable bonuses from Masterforex (Forex company) amounting to U.S. $ 1000. In that email<\/em> I was told to click on the link<\/em> provided in the email. Email<\/em> is like the image below:<\/p>\n

I had a feeling this definitely a phishing, but I wonder what kind of tactics they use, then I click that link.Then it is redirected me a link to the website similar to\u00a0 Masterforex as shown below. I was told to sign in and are asked to enter a username, password, phone password, and PIN code. Then I tried just to\u00a0 enter a random username , and guess what? I can still sign in and\u00a0 redirected to the next page as below.<\/p>\n

After that I was redirected <\/em> to a link where its display exactly as Yahoo Mail. At this stage, the thief wanted to steal our yahoo email passwords.<\/em> Just look at the destination url in my browser, the url<\/em> was not the url<\/em> you used to sign into yahoo mail. For more details see in the picture below.<\/p>\n

After I enter my username<\/em> and password for Yahoo Mail randomly then I am redirected to a page like this below<\/p>\n

\"\"<\/a>

Phising Email to My Yahoo Mail<\/p><\/div>\n

\"\"<\/a>

Redirected To Master Forex<\/p><\/div>\n

 <\/p>\n

\"\"<\/a>

Redirected To Master Forex<\/p><\/div>\n

 <\/p>\n

\"\"<\/a>

I was redirected to fake yahoo mail sign on page<\/p><\/div>\n

 <\/p>\n

<\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n <\/strong>
\n<\/strong><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

The above article is just a little picture about how the thieves trick us to steal our password, in fact there are many more tricks that are more sophisticated. Through this article I just want to warn\u00a0 the readers to be more careful in reading the email,<\/em> and be more careful in the email<\/em> that it was too “Bluff”. Here are tips from me to avoid phishing:<\/em><\/p>\n

1. Note the url<\/em> address of the destination, make sure that the address of the destination url is correct.<\/p>\n

2. For sensitive category website (such as email, online banking), make sure that it has a ssl certificate on it.<\/p>\n

3. If you are not sure of the url address that you open, you should contact the parties concerned<\/p>\n","protected":false},"excerpt":{"rendered":"

You may hear the word “Phishing“. Phishing is typically used by the thieves to get a user password credential such as online banking username and password, email, etc.. The manner in which it was all sorts, through this article I will show one phishing emails I ever could. I would invite the readers to be […]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29,880],"tags":[17,16,890],"class_list":["post-186","post","type-post","status-publish","format-standard","hentry","category-information-security","category-techonology","tag-password-theft","tag-phishing","tag-phising-email"],"_links":{"self":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/comments?post=186"}],"version-history":[{"count":40,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/186\/revisions"}],"predecessor-version":[{"id":195,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/186\/revisions\/195"}],"wp:attachment":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media?parent=186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/categories?post=186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/tags?post=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}