“Follow me, and I will make you phishers of men.” Although it’s not quite a quote of Biblical stature, it still seems to be the motto of a growing number of scoundrels now populating the internet. As a matter of fact, the Anti-Phishing Working Group recently published a report which said phishing attacks in January of 2007 broke the previous record from June 2006 by 5%. But what is phishing, anyway? Is it really a problem, and do I really need to do anything about it? This article will give a brief overview of just what phishing is, and will teach you some tricks so you won’t take the bait.
The term “phishing” originated in 1996 when hackers stole AOL accounts by tricking users to reveal their passwords. Since hacker’s often replace “f” with “ph” in emails, their attempts to “fish” for information were called “phishing”. Phishing is a criminal activity aimed at thousands, if not millions of computer users at one time, in the hopes that a few will act on them. “Spear phishing” is a targeted attempt aimed at a single individual. Both techniques attempt to acquire an individual’s passwords, usernames, credit card info and social security number by masquerading as a trustworthy company in an email.
The emails sent out by phishers are called “spoofs” and aim to lead consumers to fake websites and then trick them into giving out sensitive information. The victims believe they are merely logging into their eBay, PayPal or online banking account, but in reality they are handing their sensitive information over to thieves. Technical subterfuge schemes deposit crimeware on a victim’s PC to steal credentials directly, many times using Trojan logging spyware.



