ADVANCED PHISHING - THE ART OF STEALING

Abstract

Phishing is described as an art of stealing personal and business sensitive information using social engineering techniques. Personal sensitive information (PSI) includes your identification proof including your social security number, driving license, passport, email id and everything which defines who you are. Business sensitive information (BSI) includes your corporate details, usernames, passwords, financial corporate information, customer sensitive details and military information. Phishing scams has advanced tremendously .Phishing attacks were previously aimed at mostly individuals however now a days they are mostly aimed at corporate organizations, financial sectors, defense industry, government and last but not the least country .One thing is clear that phishing has evolved from targeting individuals and grown to target at a much bigger scale. Now-a –days when we hear Phishing it’s about companies losing millions of dollars and their Brand Value. Phishing in the past didn’t required much technical knowledge and was easier to accomplish however there has been enormous technical advancement in the way phishing techniques are used in present days. This is result of educating users and counter measures of phishing. In this article we will be the focusing on all the aspects of Phishing attacks including the technological advancements, exploitation, post exploitation techniques and the countermeasures techniques against Advanced Phishing” The Art of Stealing” . We will also learn about payloads and Web Application attacks and how they contribute to advanced phishing attacks.