What are Different types of Phishing

Hi My Friends,

I had already discussed you a lot about phishing but I think I have made you clear about the meaning and style of phishing but now the time has come to tell you about different types of phishing. I think you are thinking about online lottery fraud, job offer fraud, and fund transfer fraud and so on but my friends it’s not like that. I am going to tell about “Old wine in new bottle”. What does it mean? It is the style of business men to bring their old product in new style and in some specific style. I did not mention it earlier as all of these are phishing but some of friends told me to write about these topics otherwise writing about phishing will be incomplete.
Initially all the experts in the cyber world called all these activities are phishing and as time moves the experts started to christen the name of style of phishing as follows:-

A) Spear Phishing: - This comes in the form email like updating banking password, email id password and so on but this kind of email comes to a specific group of persons like the employees of a company or a government organization or same group and so on. It seems that the mail has come from your employer for divulging important information.

B) Smishing: - This comes in the form of SMS message. Like your mobile number has won $5 bln in a lottery and you are requested to contact Mr. G…… in his email id a….@hotmail.com and so on. And you are trapped.

C) Vishing: - This style of phishing happens through VoIP i.e:- Voice over Internet Protocol . Actually this is a combination of ‘Voice’ and ‘Phishing’. You are getting a net call from someone, who is asking you about your personal important information in the name of a company, where you have stake or you are a stake holder, employee or some other style. You will see an example of vishing in this blog here.

D) Whale-Phishing: - I think all of you know about whale. Whale is a big fish in the sea. So if you consider the net is a sea where we all are fish then if the phisher catches the most important person by his technique, he is a whale phisher. So I think you have understood about whale phishing. It’s a style of phishing where phisher targets the most important person of the concern like CEO of a company.

So my friends now you are clear about the types of phishing which are used to catch the netizens. Be cautious and divulge your personal information to him only, whom you trust after proper verification.

For reading other case studies on cyber crime pl visit.

Best of luck.

Thanking you,

Urproblemmysolution Team

Link of Identity Theft, Phishing and Cheating

My Dear Friends,

Now I am going to share you few live case studies,which I got for the last 6 months in the field of my daily work in investigating cyber crime related cases. I am sharing this real life stories with you as my moto of writing this blog is to make you aware about the cyber crime and keep you away from cyber criminals.

This is the crime of phishers in disguise of HR of a renowned company. Now read step by step what they are doing for cheating a person, who is in search of a job.

Step 1:- They are sending mails by offering a lucrative job to different persons, who had enlisted their names on online job searching portals, as an HR of a renowned company such as IBM, Videocon, Sony by creating false email id in the name of that company. Like:- hr_sony@gmail.com, hr.videoconindia@hotmail.com and so on.

Step 2:- Then the mail receiver is receiving the offer and communicating with them over a telephone number as provided by them.

Step 3:- They are claiming security deposit for that good job and asking them to deposit that money in the bank accounts as supplied by them. Thereafter they are telling them to send the scan copy to them to their email id.

Step 4:- They are stopping to communicate with the victim.

Now you will be perplexed to know that the victims are educated guys even the the experienced guys of IT sector. I am telling you about a girl from Cog....... company became a victim and came to me for lodging a complaint. I asked her about her qualification and what he told that seemed to me that she is educated with specialization in IT sector.

You will definitely call me so what this thing may happen to anyone but my friends you should keep in mind that an HR of a company like Sony will not have an email id of other domain i.e gmail or yahoo or rediff or others their email id must end with @sony.com or some domain name which belongs to Sony. Its an example. So my dear friends before depositing any amount in any one's bank account pl verify the person who has sent you the mail as in most of the cases the address of phone numbers and bank account numbers are fake and they can't be traced.

So I would suggest you not to accept this kind of online offers until you are confirmed about the caller or sender and please find the original website of the employer company and make a communication with them to know the genuinity of your offer letter. I think now you will remain alert from this scoundrels and if you can't understand me pl mail me I will respond or comment here and I will respond.
Best of luck and be ahead and beware of phishers, who are stealing identity of another and cheating the educated job aspirants.

Thanking you

Love your Country.

Case Studies on Net Banking Hacking

Hi Friends,

I think all of you are well and you have enjoyed a lot in your life in the festive season of India and also in other countries. Today I am going to tell you another style of phishers for your net banking hacking for making you aware from the hackers or cyber criminals. But before learing this you will have to read my earlier posting here. Here you found how they got your URN no. for activating third party in your bank account. But what they are doing that is as follows:- After step 2 of that article ;-

Step 3:- They take attempt to add the bank account of their agents with the hacked bank account. And then as per the banking security system the URN no goes to the mobile no of the person, who actually owns the bank account.

Step 4:- They call the person by claiming that they are from the ...... bank in which the bank of the customer exists and then they ask him/her to give the said number which reached in his/her mobile through sms as they were testing the genuinity of the mobile number of the customer.

Step 5:- The account holder gives the said URN no as he does not know anything about it. Now they get success to transfer the amount to their agent's account.
Thats all.

So my friends be cautious and don't do the mistake in future. I am really very very sorry and beg a pardon from you as I ought to tell you earlier but what to do I was very much busy with my official work so I was absent from my blog so many days.

Wish all of best of luck and thanking you,

Urproblemmysolution Team

Cybercriminals and Phishers are in the FIFA 2010 World Cup

My Dear Friends,

I have already discussed about details of wifi except one part and I think now you are thinking that what is that part. I will tell you that later. But now I am going to tell you what is the latest threat to the netizens related to the forthcoming world cup i.e: FIFA WOrld Cup 2010.

Not only me most of the invabitants of the earth are mad about FIFA WORLD CUP as Maradona, Messi, Kaka, Drogba, Roonie, Robinho many many players will show their skill in this world football championship and most of us will try to enjoy this game through television direct telecast or reach to South Africa to see the games directly by sitting in the gallery and their are 6 official partners and Visa is one of them.

Cybercriminals and phishers are using this sentiments of football lovers. Now definitely a question has come in your mind that what are they doing with these? So I will tell you now what are they doing with these. The cyber criminals and phishers are using malwares with the attachments in the form of tickets and lottery winning mails in the name of Visa and so on. They are also sending you the world cup playing charts of different teams with an attachment and when you open it a malware will be installed in your computer and your computer will be used as zombie by the cyber criminals. For knowing about zombie you are requested to read my previous postings. Not only that the phishers will take your money in their previous style.

Here are two pictures for you, enlarge it. So be cautious. Don't open any unknown mail about FIFA world Cup 2010 and don't download any attachment from this mail as this includes zero day vulnarability, which will not be traced by any antivirus.

Thanking You

Urproblemmysolution Team

What is New in Phishing

My Dear Friends,

I already brought before you different types of phishing earlier and all my writings were on the basis of originals facts, which happen in daily life, and these are not from any books or from any lectures or from those who don't do anything but shows that they do everything. So what I am going to bring before you a new type of phishing, which I detected after getting a information from someone.

This is actually Phishing in the form of Extortion. These type of mail goes to the renowned persons in the society. He may be a Doctor, businessman or any big corporate personality and in the place of sender's email id it will be a email id of an extremist group.

Now just have a look on the email id. maoist.in@yahoo.com, maoist.in@gmail.com, alkaidaagent@yahoo.com and so on. Actually they are using the name of the extremist group of the target country for sending mail to their target persons and they are claiming money from them by telling that they had been appointed for killing him within a stipulated period and if he (the target) pays him a certain amount they will disclose him the name of that person and will not kill him but if the target does not pay they will kill him on that very day.

After getting the mail if the target person responses they will give him the account number and there after they will withdraw the money from their through ATM counter and the person in whose account the money will be deposited by the victim he is also a victim in this case as they are using his Bank Account like other phishing cases.

Now definitely you are thinking who is the culprit behind it. Yes my friend I think you are guessing about the right man. They are none other than the ...........
No no I don't want to tell the name of that Continent and that community people as they may say again we are. Really my cheat brothers I don't want to take your name here and thats why I am not telling. I hope one day you will come in the life of civilized society.

So my friends I will request you not to get affraid on these type of mails as these are phishing mails in the form of extortion and I will also request you to spread this news to all of your friends about this recent phishing mails.

Best of luck.

Thanking you,,

Urproblemmysolution team.

Beware From phishing mail Pay Pal Members

Pay Pal Members Beware From Phishers and Cyber criminals

Dear Friends,

    Now we are producing before you about two fraud emails which was seemed to be generated from Pay Pal and it came to one of our team member and then feeling it suspicious he mailed the entire content to Pay Pal and in response what Pay Pal said we are producing that before you for your future reference. 

Here is the suspected mail from spammer with its header file which was sent to Pay Pal for verification:-

Form Message
customer subject: English
customer message: Additional Information: 'I received this mai on
##/##/#### and was it from yours?

"Dear PayPal member,

We're sorry. We are not able to process your recent reply to our email.
We are the processor for the email surveys for PayPal and are not
directly linked to the PayPal customer service center.

Please respond through the survey link imbedded in the original email
you received from us.

Thank you and we apologize for the inconvenience.

PayPal Survey Partner"

This is the header:-
Delivered-To: kept hidden##@gmail.com
>Received: by 10.115.60.18 with SMTP id n##cs######wak;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Received: by 10.140.203.3 with SMTP id
a#mr#######rvg.###.#############;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Return-Path: <>
>Received: from mail.benchmarkportal.com (mail.echosurvey.com
[###.###.##.###])
> by mx.google.com with ESMTP id
##si########pzk.###.####.##.##.##.##.##;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Received-SPF: neutral (google.com: 207.166.99.104 is neither permitted
nor denied by best guess record for domain of mail.benchmarkportal.com)
client-ip=###.###.##.###;
>Authentication-Results: mx.google.com; spf=neutral (google.com:
207.166.99.104 is neither permitted nor denied by best guess record for
domain of mail.benchmarkportal.com) smtp.mail=
>precedence: bulk
>in-reply-to: 94dd4f4c0907201044pa3ba0ct@mail.gmail.com
>return-path: <>
>Date: Mon, ## Jul #### ##:##:## -####
>Message-Id:
>from: "paypal.feedback"
>to:
>subject: Automatic Response'
 

Now what Pay Pal replied:- 

Dear Name Kept hidden,

Thank you for contacting PayPal.

Hi Kept hidden! I have read your email and understand your concern over the
email you received. Let me assist you further.

If you think the email you received did not match the description I have
included below please forward the email you received to
'spoof@paypal.com'.

PayPal frequently issues surveys in attempt to find more ways to improve
our service and accommodate your needs.

  * If you receive a survey from PayPal, or a third party vendor on
behalf of PayPal, it will arrive as a link sent to you through email *
  * To get to the survey page, simply click on the link, or paste the
link into your browser's web address box

Please keep in mind that a medium like email allows anyone to send a
message to you. Before entering information into the survey you received
via email, you should verify the source of the email.

* To make sure that the email survey you received was from PayPal,
follow these tips:

  1. You will NOT need to enter your password at any point during the
survey
  2. The survey you received will never ask you for any personal
information
  3. All surveys will address you by first and last name

We appreciate your input, and we thank you for using PayPal!

We know situations like this can be difficult, so thanks for working
with us. If you have more questions, visit our Help Center by clicking
"Help" in the top right corner of any PayPal page.

Sincerely,
A Name is there
PayPal, an eBay Company

Copyright © 1999-2009 PayPal. All rights reserved.
Consumer advisory - PayPal Pte. Ltd., the holder of PayPal's stored
value facility, does not require the approval of the Monetary Authority
of Singapore. Users are advised to read the terms and conditions
carefully.

True Story on Phishing

Case History of Phishing with True Story

Dear Friends,

We promised you that we will produce an article before you about a true story of Phishing and how victim was tapped by the Phishers and how much amount he lost and what was the family status of the victim. In this case the names and original addresses of victims are kept in secret but their family status is very high profile. It is a joint bank account of a well known Private Bank of mother and son. Mother is a retired System Administrator of a bank and son is a young highly qualified educated person from a world famous Management Institution. They used the net banking system both by using separate user name and password for the same account.

How were they tapped by the phisher? The phisher/hacker/cybercriminal sent a phishing mail to the son’s e-mail id for updating his net banking data by saying that if he does not update the same his net banking system will be disabled and the that very well educated son updated it which resulted a loss of Rs. 175,000/- to them and they learned it after three days about the loss.

What the Phishers did? They transferred the above amount to another person’s savings account with a branch of that bank in a separate state and he was then asked by SMS through internet to withdraw that amount through ATM and there after deposit to another separate bank account of different branch and those persons in whose account the amount were deposited they were also asked to do the same after deducting their commission and finally the amount was withdrawn by an unknown person and transferred to Nigeria.

I think now you are thinking the persons in whose account amount was transferred and deposited are the racket members or gang members of these cybercriminals. Yes we also thought so but during the course of investigation it has come into light that those persons got appointment through internet from outside of India as a collection agent of a foreign bank, in exchange of fat salary and commission as per deposit to their accounts.

In this case we will now tell you step by step how the Hackers/Phishers got success:-

Step 1- The criminals sent spam mails to a bulk of netizens by offering false appointment as a collection agent of a bank. This mail was carrying a hidden program with auto run system and the activity of that program (spyware: - Pl. read the article about Weapons of cybercriminal) was to read the mail box of recipients and send those addresses to the hacker/phisher.

This mail was sent from America by using satellite phone

Step 2- Now they asked the willing persons who wants to be an employee to open a savings bank account with specific private foreign bank having ATM facilities as they target renowned foreign bank account holders. The agreed persons did those according to the Phishers.

This mail was sent from America

Step 3- When they found any mail address about a bank of the recipient in their address book then they used the software of email spoofing (Pl. read the article about Weapons of cybercriminal) for sending mail to them as if it has come from his bank for updating the net banking system by using Pharming (Pl. read the article about Weapons of cybercriminal) tool.

This mail was sent from America by using satellite phone

Step 4- Now they assured themselves about access to that account from the username and password, which they got through phishing mail, and got success.

This attempt was made from Philippines

Step 5- Now they added the savings account of their false employee to the victims account as third party approval and it takes minimum 9 to 24 hours to activate.

This attempt was made from Philippines

Step 6- Once it is activated they transfer the entire amount except minimum balance part by part to their false employee’s savings bank account during day time for completing the other transactions. They transfer that much amount, which a person can withdraw maximum from ATM.

This attempt was originated from Nigeria

Step 7- Now as per appointment terms and condition they sent SMS through internet by SMS spoofing to the said employee for withdrawing that amount from ATM and deposit it to another account and send the scan copy of deposit slip to their mail id as confirmation. This process continued to other false employees also. In the chain wise the amount finally deposited to a foreigners bank account, with fake names and address, and finally transferred to the hackers in Nigeria through money transfer agencies.

All the addresses we got from tracking the IP address of mails and net banking. In our next posting we will share with you how to get rid of from phishing mails.

Thanks

Urproblemmysolution team

Disclaimer:-

This is true story only for the educations of netizens so it’s a request don’t follow this way. This is a completely criminal offence if anyone does so he will be liable for that.