Payload – Information Theft Phishing
{"Image DocumentName": "Payload \u2013 Information Theft Phishing", "Image ImageDescription": "exploits social engineering to leverage the user\u2019s trust by masquerading as communication from a trusted source. include a URL in a spam e- mail that links to a fake Web site that mimics the login page of a banking, gaming, or similar site. suggests that urgent action is required by the user to authenticate their account. attacker exploits the account using the captured credentials. spear-phishing. recipients are carefully researched by the attacker.  is crafted to specifically suit its recipient, often quoting a range of information to convince them of its authenticity. Another approach used to capture a user\u2019s login and password credentials is to. include a URL in a spam  that links to a fake Web site controlled by the. attacker, but which mimics the login page of some banking, gaming, or similar site. This is normally included in some message suggesting that urgent action is required. by the user to authenticate their account, to prevent it being locked. If the user is. careless, and doesn\u2019t realize that they are being conned, then following the link and. supplying the requested details will certainly result in the attackers exploiting their. account using the captured credentials. More generally, such a spam  may direct a user to a fake Web site. controlled by the attacker, or to complete some enclosed form and return to an  . accessible to the attacker, which is used to gather a range of private, personal, information. on the user. Given sufficient details, the attacker can then assume the user\u2019s. identity for the purpose of obtaining credit, or sensitive access to other resources. This is known as a phishing attack and exploits social engineering to leverage user\u2019s. trust by masquerading as communications from a trusted source [GOLD10]. Such general spam  s are typically widely distributed to very large numbers. of users, often via a botnet. While the content will not match appropriate. trusted sources for a significant fraction of the recipients, the attackers rely on it. reaching sufficient users of the named trusted source, a gullible portion of whom. will respond, for it to be profitable. A more dangerous variant of this is the spear-phishing attack. This again is an.  claiming to be from a trusted source. However, the recipients are carefully. researched by the attacker, and each  is carefully crafted to suit its recipient specifically, often quoting a range of information to convince them of its authenticity. This. greatly increases the likelihood of the recipient responding as desired by the attacker. Reconnaissance and Espionage. Credential theft and identity theft are special cases of a more general reconnaissance. payload, which aims to obtain certain types of desired information and return. this to the attacker. These special cases are certainly the most common; however, other targets are known. Operation Aurora in 2009 used a Trojan to gain access. to and potentially modify source code repositories at a range of high tech, security, and defense contractor companies [SYMA11]. The Stuxnet worm discovered. in 2010 included capture of hardware and software configuration details in order to. determine whether it had compromised the specific desired target systems. Early. versions of this worm returned this same information, which was then used to. develop the attacks deployed in later versions [CHEN11].", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}