To Phish or not to Phish that is the Question...

Discussion in 'The Lounge' started by DavidGP, Dec 16, 2011.

  1. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Are you a Phishing Ninja or a Phishing Pole? well in this day and cyber-age it has become a very major issue in that criminal gangs now find it much easier to try and steal your personal information to allow access to your Bank account etc. than to come rob your home.

    Phishing is one such way that they try this and at times if you are unsuspecting or a novice to the perils of the internet age this can be very difficult to know if a website is real or not.


    OpenDNS have a Quiz on this at present, so click the link below and see how well you do.

    Phishing Quiz

    Well I scored
    http://img403.imageshack.us/img403/4043/meninja.jpg



    If you are not one of our regulars and just stumbled upon this thread then more info on phishing HERE from Microsoft and if you have any issues relating to Phishing or Questions on Phishing then please do ask them in a new thread in our Software forum HERE and we will be pleased to answer them :)
     
  2. oma

    oma MajorGeek

    Congrats David. I got 12 out of 14 right.
     
  3. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hey well done oma that's a superb score too.
     
  4. augiedoggie

    augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

    Whew! I had to guess at some of them too. Now, I don't think that I would know what I do if I had used OpenDNS and not learned anything.

     
  5. lbmest

    lbmest MajorGeek

    Hmm, gonna have to polish up some skills rolleyes - correctly identified 12 out of 14 sites in the OpenDNS phishing quiz.
     
  6. oma

    oma MajorGeek

    Considering that I didn't know the majority of websites and their signons. Mostly went by my gut feelings and also checking if they had https. :-D Remember didn't get Amazon right and forgot the other one I missed.
     
  7. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi oma

    Now thats the perfect way to attack this issue, go with your gut, and never be click happy with sites, if they dont seem right, then trust your instinct.

    Amazon IIRC was difficult as it was a UK version of the site IIRC, and like most sites also they do tend to have Main urls that are say http://majorgeeks.com and that's easy to spot, but then you may get http://forums.majorgeeks.com, again legit but some internet users may see the likes of http://iscamyou.bankofamerica.com and think its legit when its likely not.

    Some websites become more difficult to tell legit from non legit from the sign-on/in pages and at times they have that bit before the main name as in say https://iamlegit.bankofamerica.com so in these instances I do advise users to goto the main homepage of the company then click the signin button and not use saved or random links in emails or in searches to login to any website.

    If you have links to a site that is say https://123.123.123.123.yourbank.com then do not click ever, as shopping or finance and gov sites do not tend ever to use the IP address.

    I just felt this a topic to cover again at this period in time and especially as OpenDNS sent me a newsletter with that link in, so jogged my memory on this subject again.


    *no urls where harmed in the making of this post and only the legit ones are live to click.
     
  8. Ken3

    Ken3 MajorGeek

    Got 12 out of 14 as well. I was looking at URLs as well, and thought I was clicking on "Real" but was on "Phish" instead. Did it again and still missed the Amazon real site - it didn't have the full URL with "https:", so it was hard to tell if it was the real thing.
     
    Last edited: Dec 16, 2011
  9. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Good stuff Ken, but I would expect no worse than this and from other core users of the forum as the security stuff has been hammered over and over again.

    I would really like to see if any of you say have a novice friend do the quiz and see what they get?
     
  10. Rikky

    Rikky Wile E. Coyote - One of a kind

    I had no idea one most of those login's so I just marked them all phish to be on the safe side.:confused

    Facebook is legal phishing anyway...:-D
     
  11. Ken3

    Ken3 MajorGeek

    Thanks David, where I work (Federal employee in DOD) we get to do yearly mandatory training on Information Security/Assurance. So between work and this place all things are good.


    and this post now makes me a Major Geek once again. :)
     
  12. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Yeah I know where you work at one of the valuable depts in DOD, go Navy!!!

    Glad you found MGs a great source of info all these years but well see HERE
     
  13. LauraR

    LauraR MajorGeeks Super-Duper Administrator Staff Member

    LOL I'm just really good.
     
  14. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Wooosh swipe..... hahhhaaaa... "what the hell was that" :) *it was LauraR just being really good phishing ninja*
     
  15. LauraR

    LauraR MajorGeeks Super-Duper Administrator Staff Member

    Just give me a sword and I'll be set!
     
  16. augiedoggie

    augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

    Ditto!
     
  17. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Ah will have to see Mimsy and see if she has a spare ;)
     
  18. sibeer

    sibeer MajorGeek

    "You're a phish-spotting ninja! You correctly identified 13out of 14sites in the OpenDNS phishing quiz.

    You are skilled at spotting even the toughest phishing scams. But beware: cyber criminals are more clever than ever at creating sites that fool even the most experienced phishing detectives. Set up OpenDNS, the world's fastest-growing Internet security and DNS service, and let us take the guesswork out of identifying phishing sites. You can use OpenDNS at home or at work and be confident you're always protected, because OpenDNS automatically blocks phishing sites."


    I missed American Airlines one. Some were guesses, some were obvious, including AA . It only takes one so I'm doomed.;)
     
    Last edited: Dec 18, 2011
  19. augiedoggie

    augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

    Ya, your 'geeksense' is working!:major
     
  20. sibeer

    sibeer MajorGeek

    Not necessarily. I'm not sure if it's ok if a guy were to open one of theses sites without checking, or if it's only an issue if you actually send info, like signing up to a fake.
     
  21. mcsmc

    mcsmc MajorGeek

    Score of 14/14.

    The key to a few was some minor misspellings. Also, any website with the green name means it's a verified site. IP addresses are NEVER good for mainstream sites, especially when they include a port number.

    I wasn't familiar with a lot of the sites, but I've learned over the years exactly what to watch out for. Unfortunately, I've seen phishing sites that look a lot better and have much better URLs than the ones on the test. It's still a decent test, though.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds