Archive for the ‘Spam Protection’ Category

Whitelists – The Ultimate in Spam Protection

Monday, May 31st, 2010

Whitelists are quite possibly the single most effective form of spam protection available on the market today. They are as close as you can get to totally eliminating spam from your inbox.

A whitelist is a database of trusted email addresses, IP addresses and domains. To build the list, each one of these trusted sources is manually added to the whitelist. Only email from a whitelisted source is delivered to the user’s inbox. In fact, whitelists are so effective, that the catch-rate for spam is almost 100%.

However, the efficiency of whitelists comes at a price, because it produces a large number of false positives. This means that a lot of legitimate email goes undelivered. To deal with this problem, a challenge-response technique is often instituted.

When an email from an unknown source is received, the system will respond automatically, sending a “challenge” back to the sender. This challenge may require the sender to answer certain questions, or decipher an image that displays a series of letters and numbers. This image can only be deciphered by a human, and not by spamming software. Once this is successfully done, the email is allowed to go through the system to the inbox. The sender is also added to the whitelist. The challenge-response methodology uses a combination of human judgment and software technology to determine which email to let through and which to block.

See how much you can learn about Spam Protection when you take a little time to read a well-researched article? Don’t miss out on the rest of this great information.

The advantage of this method is that it is not worth it to spammers to wade through all the challenge-response emails and respond to them. They are more likely to remove the email address from their lists and go after other addresses that do not have such requirements. However, the inconvenience of having to register to send email to the whitelist user may discourage legitimate email senders from following through.

Another impractical aspect of whitelists arises when the email account user places an online order, registers for a newsletter or other service. Each of these new email sources must be manually added to the white list. If the user forgets to do this, or enters it incorrectly, important email may be blocked.

Whitelists are far more effective than anti-spam filters, because the latter work by calculating the probability that if an email contains particular words, it is likely to be spam. However, spammers easily get around this feature simply by misspelling words, or by avoiding words associated with spam. For this reason, spam filters are usually only 80-90% successful. This may be acceptable on a personal account, but not on a business account that likely receives over a hundred emails a day.

Whitelists are especially beneficial to businesses as they almost totally eliminate the waste of valuable time that would otherwise be spent wading through the hundreds of spam that are received each day. However, despite their effectiveness in blocking spam, whitelists have not gained widespread use because of the high rate of false positives. It is also virtually impossible for businesses to compile an exhaustive whitelist database of trusted email sources.

About the Author
By Anders Eriksson, who just launched this great product..
- Are you looking to get traffic to your website? Introducing… Free Google Traffic System!!

Top 5 Myths About Phishing

Wednesday, April 21st, 2010

When you think about Spam Protection, what do you think of first? Which aspects of Spam Protection are important, which are essential, and which ones can you take or leave? You be the judge.

There are several myths and misconceptions that abound when it comes to Phishing. These are the top 5 most common ones:

Myth #1

Anti-spam software can detect phishing email

While anti-phishing and spam filters can decrease the number of phising emails that get into your inbox, they are not 100% effective. Whenever anti-phishing technology keeps improving, the phishers are always devising ways to get around them. It truly is a cat-and-mouse game.

Secondly, because spam email and phishing email are different (phishing email spoofs a legitimate business), a different set of rules and criteria are required to detect the phisher.

Myth #2

As long as I don’t give my password and user-name, I won’t be Phished

Phishers are getting increasingly sophisticated. They now employ several variations on the original spoofed email that once requested your password and user-name.

They will, for example, instruct you to click on a link so as to update your information at a website. If you do click on the link, malware such as a keylogger or syware wil be downloaded to your computer.
The link may take you to a spoofed website, but it may also link you to the actual website of the legitimate business. Once there, a pop-up or overlay is activated, directing you to log in. You will probably be unaware that your access information has been compromised.

Myth #3

Truthfully, the only difference between you and Spam Protection experts is time. If you’ll invest a little more time in reading, you’ll be that much nearer to expert status when it comes to Spam Protection.

Most Phishing attacks originate from outside

With all the time and effort that has been poured into the Nigerian 419 spam scams, it is commonly assumed that phishing originates from emerging countries outside America. However, a study by Symantec shows that the majority of phishing attacks actually originate within the U.S.

Myth #4

Phishing is a problem that we can solve by educating users

This is not true. There are various ways the phisher can camouflage an IP address. In fact, a large proportion of phishing attacks are enabled through common misconfigurations in a web application. Phishers can manipulate internet technology to redirect you from a real and legitimate website, in such a way that although the original web address points to this real web site you are taken to the phisher’s web site.

As the incidents of phishing and identity theft have increased, people have become more aware, and better able to identify phishing emails. The percentage of phishing victims has gone down. However, even though users are getting better educated and informed about phishing, there is always still a chance that someone will mistake a well-crafted phishing email for the real thing.

Myth #5

I will know one when I see one

This is another misconception regarding phishing, and a potentially dangerous one at that, especially in our digital world. With all the time, talent and technology available to them, these cyber crooks have more than ample resources to create and execute increasingly realistic email spam, web site spoofs or other electronic means by which to scam you out of your confidential financial data and wreak havoc on your financial affairs.

Vigilance is, in fact, your number one protection against the phisher’s hook. Underestimating the phishers may cost you.

About the Author
By Anders Eriksson, who just launched this great product..
- Do you want to make Your PDF files viral? Use This Secret Viral PDF Rebrander: Viral PDF

Top 5 Techniques to Protect Yourself From Spam

Sunday, April 18th, 2010

It is virtually impossible to avoid having your email address end up on a spammer’s mailing list. You can, however, take steps to minimize the amount of spam that you receive. Here are to top five:

Address Munging

Never, ever post your permanent email address publicly online. Posting it on a website, on USENET, or in a guest book, for example, virtually guarantees that it will end up on a spammer’s emailing list.

If you absolutely have to supply an address, or regularly participate in online forums but do not want further communication, camouflage your address in some way. You can, for example, disguise your address by writing it in such a way that humans can read it, but the spammers automated programs cannot.

Example: instead of JaneDoe@ISP.com, add a blank space before and after the “@” sign, or use characters e.g. JaneDoe at ISP dot com.

This is reffered to as “address munging”. While address munging does not allow for a regular, clickable email link, anyone who really wants to contact you will figure it out the proper address.

If you have a website, provide a feedback form instead of giving your email address.

Sign up for an Alternative Email Addresses

Do not use your primary email address when placing an online order, getting a free download, or want to sign up for a newsletter or free service Get a secondary email address that you can use in these instances. You can open a free email account for this purpose. Email providers such as GMail and yahoo offer this free email service.

It seems like new information is discovered about something every day. And the topic of Spam Protection is no exception. Keep reading to get more fresh news about Spam Protection.

Reserve this email address specifically for this online activity – do not offer it to people from whom you want to receive email, as this will likely be lost in the deluge of junk mail.

Also, be sure to log into this account on a regular basis to delete the junk mail and avoid having the account closed. If you get over-spammed, just close this account and open a new one.

Choose an email address that cannot be easily guessed at. One method used by spammers to get email address is to generate a list of likely email addresses based on a combination of first names, last names and commonly used words. They may, for example build an emailing list that has variations of an address like JoelDoe1@hotmail.com, JoelDoe2@hotmail.com etc.
You can foil this spammer’s tactic by using a relatively long email address, for example 8 or more characters long. You should also avoid choosing email addresses that include either of your names. Use your initials instead, in combination with numbers, e.g. jtd1509@yahoo.com.

Beware the Phisher Spam

Phishing is a tactic used by spammers to scam you into giving up vital personal and financial information. Its sole purpose is identity theft.

Never divulge any personal or financial information that is requested in an email. Your bank or credit card company would never ask you to confirm or update your personal information via an email or a link in an email. Any such emails should be reported to the bank or credit card company. Never, ever click on any links in this type of spam.

Get a spam filter or spam blocker

Stop the spam dead in its tracks before it ever makes it into your inbox. Well, most of it at least. Though they are not 100% effective, anti-spam software will keep most of it out. Even if you only use the internet a spam filter will help protect you from spam.

That’s the latest from the Spam Protection authorities. Once you’re familiar with these ideas, you’ll be ready to move to the next level.

About the Author
Have you downloaded Anders’ latest information for adsense publishers yet? Download these new fresh sites from this all new website, called Adsense Ready Sites

Protect your Kids from Spam

Sunday, March 21st, 2010

Spam is commercial email that is sent out in bulk to millions of people without their consent. It is may contain advertising messages for regular products and services but increasingly, it is email of an inappropriate, offensive or malicious nature.

Today, many children have an email address that they use to email their friends, submit homework, etc. It is a fun, inexpensive and instant way to keep in touch. However, as the volume of spam keeps rising, the need to protect children from the dangers of spam is a growing concern.

Like all other Internet users, children are just as susceptible to receiving spam as are adults. And because spam is an equal opportunity menace, kids are just as likely to receive spam that contains adult and pornographic material. While there is really no way to totally eliminate the possibility of your kids receiving spam, there are steps you can take to minimize it. Here are a few:

Here are a few tips to help protect your kids from spam

Email Filters

Your email service comes with email filters built in. You can use these to filter your child’s email into specific folders, and filter spam into the trash folder. This involves setting up rules that your email program will follow in determining what action to take on incoming messages: to let it through to the inbox, send it to trash or to block the sender.

Your email spam filter program will apply these rules based on certain words in the subject line or body of the email. For example, if an email contains the word “viagra,” it will be sent directly to the trash and the sender blocked.

If you base what you do on inaccurate information, you might be unpleasantly surprised by the consequences. Make sure you get the whole Spam Protection story from informed sources.

Spam Blocker

Your email service may also come with a spam blocker. If it does not, it may be worth your while to invest in one for your child’s computer. Where-as your email filter filters incoming email into folders, the spam blocker blocks spam from going through the system. It checks your mail server every 10 minutes, where it deletes the spam and destroys any viruses it finds. Legitimate email is let on the server and downloads to the inbox when you log in.

Whitelists

Set up an email account for your child that “whitelists” only specific email addresses. A whitelist is just a list of trusted and approved email addresses. For example, you can have the addresses of your child’s grandparents, aunts and uncles whitelisted. Whenever email is received from any of the whitelisted addresses, it goes directly to your child’s inbox. All other email addresses are blocked.

Monitor, Monitor, Monitor

Be sure to log into your child’s email account on a regular basis to monitor the incoming and outgoing messages, and to ensure that the spam filter and spam block are working appropriately.
Using your email spam filter, you can set up a rule that will ensure that a copy of every email that is sent and received on your child’s account is forwarded to your own email address

It is very important to educate your children on the dangers of spam and how to handle it if they do receive any in their inbox.

About the Author
Have you visited Anders’ latest site for adsense publishers? Download new fresh sites in this all new site, called Adsense Ready Websites

What Can an Anti-spam Firewall Do For You?

Wednesday, September 16th, 2009

Today, the Internet is reminiscent of the wildest days of the Wild, Wild, West. Your stagecoach through the World Wide Web can be hijacked at any instant if you have no knight in firewall armor to ward off any viral intruders. When your computer is connected to the internet with no firewall running, it is vulnerable to attack from spammers, hackers and phishers.

Much like human viruses, computer viruses run the gamut from the benign to the fatally destructive to the computers they infect. And just as with human viruses, prevention is better than cure. Prevention begins by stopping them in their tracks at the portals of contact. This is where a firewall can come in handy.

An anti-spam firewall application will, to an extent, help in keeping viruses at bay. There is, however, no firewall that is 100% hacker proof – there are too many ways in which viruses can be embedded in a software download or regular data, for a firewall to detect and catch them all. However there are some relatively effective firewall programs available on the market, and some of them are actually free for your personal use.

The information about Spam Protection presented here will do one of two things: either it will reinforce what you know about Spam Protection or it will teach you something new. Both are good outcomes.

At the bare minimum a home personal computer that is connected to a cable modem or a full time connection needs to have and run a personal firewall software program, as well as anti-spyware and some type of anti-viral program.

The ideal firewall will hide the ports that a hacker might use to gain access to your PC and protect your home PC from attacks, as well as track those attempted entries and prohibit unauthorized access or output from your computer. Two-way firewalls are the best as they block the threats that are incoming OR outgoing, to prevent things such s virus, Trojans or malware from being installed without you knowing it.

Windows XP, as well as the new Vista have a personal firewall built into the operating system that is by default turned on. Because it monitors and offers popup warnings many people turn it off, and leave themselves remarkably vulnerable to attack. The Windows firewall default of “on” should be maintained until and unless you find another software or hardware firewall to protect your system.

Some good freeware anti-viral and firewall software programs are available, such as Zone Alarm and Zone Alarm Pro. AVG also comes in a free as well as a pro version.Neither of these programs comes with adware attached and they are very good solutions to begin to address your internet security.

You will need good anti-virus programs to go after any viruses that may inevitably bypass your firewall. It should be programmed to either quarantine or, preferably, destroy them. Last but certainly not least, it is essential to always keep your anti-viral and firewall programs up to date with the newest patches and security updates. Most viruses target your C: drive, so scan it daily. And never, ever open any unsolicited emails or the attachments that come with them.

You can’t predict when knowing something extra about Spam Protection will come in handy. If you learned anything new about Spam Protection in this article, you should file the article where you can find it again.

About the Author
By Anders Eriksson, feel free to visit my latest venture: GVO to claim your $1 trial membership!

Popular Email Scams on the Internet Today

Monday, September 7th, 2009

So what is Spam Protection really all about? The following report includes some fascinating information about Spam Protection–info you can use, not just the old stuff they used to tell you.

Phishing Scams:

“Phishing” is a high-tech scam that uses spam or pop-up messages to deceive you into disclosing your credit card numbers, bank account information, Social Security number, passwords, or any other kind of confidential personal information. Identity theft is the goal of this scam.

The phisher sends you a fraudulent email that is designed to look like it was sent from a reputable company. The email directs you to a website that looks like it belongs to the reputable company, but is actually a spoof. You are asked to “update” your information here, and if you do, all that personal information goes straight to the phisher. uses this information for identity theft purposes such as making withdrawals from your bank and credit card accounts, ordering new credit cards which they promptly max out, etc.

Some of the most recent phishing attacks have spoofed the email and websites of well known companies, including eBa, Paypal, Yahoo, Pfizer, Bank of America, among others.

Work-At-Home Scams:

These are some of the more tempting spam scams. They offer those who need to make extra money the opportunity to do so, and invariably the email will state: “no experience necessary.” The scammer often claims to have “inside information,” and tries to bait you with the lure of quick money for next to no effort. More often than not, you are asked to pay anywhere from $35 to several hundred dollars to purchase the kits or materials that will not earn you a dime.

This scam often offers opportunities involving handicrafts, stuffing envelopes or medical billing on your home PC. If you fall for this scam, pay the fees for the handicraft or envelop-stuffing “kit,” and complete the assembly of the crafts as instructed, you will be informed that your work is of poor quality and not worth paying for.

If you sign up for the medical billing “opportunity,” you will be asked to purchase a list of doctors. These doctors are either fictional or do not want or need your services and never did.

You may not consider everything you just read to be crucial information about Spam Protection. But don’t be surprised if you find yourself recalling and using this very information in the next few days.

Credit Repair Scams:

These scams tell promise to erase real and usually correct negative information that has been added to you credit report, so that you can qualify for loans, mortgages, unsecured credit cards, etc.

These services rarely deliver on their promise, and more often than not, will create a great many more problems in the long run. They have even been know to suggest that you commit fraud e.g. falsifying your social security number.

Guaranteed loans on easy terms:

Some email scams offer guaranteed, unsecured credit, such as a home-equity loans that does not require equity in your home, or credit cards regardless of your credit history.
This offer of credit is often extended by an off-shore bank.

This scam is often executed in conjunction with a pyramid scheme, which will encourage you to make earn money by signing up friends and family to participate in the scheme.

The promised offer of a home equity loans turns out to be a useless list of
lenders who will turn you down if you don’t meet their qualifications. The promised credit cards never come through, and the pyramid money-making schemes invariably collapse.

Chain letters:

The spam email directs you to send a small amount of money to each of 4 or 5 names on a list, add your name to the top of the list and remove the last name on it, and then forward the updated list via bulk mail. Typically, the letter will claim the scheme is legal, and may refer to sections of US law as supporting proof of this. Not true.

These chain letters are almost always illegal, and nearly all those who participate in them lose their money.

About the Author
By Anders Eriksson, feel free to visit my latest site: Power Copy Club to claim your FREE membership!

The Next Generation of Spam: Image and PDF Spam

Friday, September 4th, 2009

In today’s world, it seems that almost any topic is open for debate. While I was gathering facts for this article, I was quite surprised to find some of the issues I thought were settled are actually still being openly discussed.

As spam filters get increasingly effective, spammers are changing their tactics to foil anti-spam software and get through to your inbox. Recently, this has involved a shift from the use of text-based spam to the use of embedded images and PDF file attachments as the preffered delivery method for their spammy intrusions.

Image Spam

The prevalence of this form of spam increased in 2006, primarily as a means for advertising penny stocks. It involved the use of a picture or graphic embedded in the body of the junk email. The junk email’s message is displayed as an image.

Because most anti-spam filters are text-based, image spam was relatively successful. This led to its use in advertising everything from sexual enhancement to fake pharmaceuticals.

One serious effect of image spam has had is to further clog up Internet bandwidth, and drive up costs to businesses. This is because the average size of each junk email almost doubled. In fact, this increased size and the sheer volume of image spam forced many businesses to block all emails that contained embedded or attached images.

By early 2007, image spam reached an all-time high, accounting for almost two-thirds of all junk email. However, as spam filter technology has adapted to detect image spam, its use has since declined to less than 15% of all junk email. Instead, spammers are turning to PDF spam

PDF Spam

It seems like new information is discovered about something every day. And the topic of Spam Protection is no exception. Keep reading to get more fresh news about Spam Protection.

Spammers are increasingly using PDF files to bear their spam messages. The practice begun in mid-2007, primarily as a scam to fool recipients into investing their money in the stock of a particular company.

With this type of spam, the junk email is sent out with a PDF file attachment, which most anti-spam filters cannot or do not read. These attachments range from rudimentary to professional-looking documents. The text in the body of the email is usually nonsensical gobbledygook that the spam-filter does not recognize as junk mail.

For the spammer, the use of PDF files is advantageous because PDF files are so commonly used in the business world. In fact, several companies allow or even require their business email systems to deliver these documents to the recipient. This makes it very likely that this PDF spam will reach the user’s inbox.

The use of junk mail with PDF attachments takes up even more Internet bandwidth. This is because PDF files are generally much larger than the embedded pictures and graphics used in image spam. Image spam is typically in GIF format; PDF files are upto 3 times the size of these files.

The upside to the use of image and PDF spam is that so far, there is no hard evidence that either one can be used to embed malicious software on the recipient’s computer. The only harm is done to those who do what the message says. Spammers have also begun to experiment with attachments in different file types such as excel and zip files.

The advent and decline of the different types of spam attest to the cat-and-mouse game that goes on between the spammers and the security experts. As anti-spam technology catches up to their techniques, they continue to innovate and change tactics to deliver their spam messages.

That’s the latest from the Spam Protection authorities. Once you’re familiar with these ideas, you’ll be ready to move to the next level.

About the Author
By Anders Eriksson, feel free to visit my latest site: Power Copy Club to claim your FREE membership!

Top Ten Tricks of the Spammer

Tuesday, August 11th, 2009

Have you ever wondered what exactly is up with Spam Protection? This informative report can give you an insight into everything you’ve ever wanted to know about Spam Protection.

The spammer’s most fervent hope is that you are ignorant of the tricks and tactics used to spam your inbox. Learning the spammer’s nefarious ways is your best protection against spam.

Manipulating Text:

This is one of the most commonly used spamming techniques. Spammers will manipulate the text in the email, to foil the anti-spam filters. They may, for example, deliberately misspell some words: “M0rtg4ge” for example. They may add characters or spaces to words in the email header, to make the email seem unique from other email. Like this: X_A_N_A_X Here’s an example, . They may also insert random strings of text within the email.

Chain Letters:

Spammers may send out chain letter instructing you to forward the email to your friends and family. To entice you to do so, it may claim that forwarding it will bring good luck. This spam may carry viruses or a Trojan horse, which is sent along to anyone you forward the email to.

Image-based Spam:

The spammer sends out spam that contains an image in GIF format. This image bears the spammy message. Image-based spam is effective in by-passing spam filters because they are generally text-based.

Dictionary attacks:

This is a technique used by the spammers to find email addresses that they can spam. It involves trying random combinations of common names and words, and using these to making up email addresses, e.g. JaneDoe@YourISP.com, JDoe@YourISP.com, JaneDoe1@YourISP.com. The spammer will then send out junk email to the different variations of these addresses in the hope that some of it will go through,

Spammers tend to direct the dictionary attacks at the large email companies, which have a large number of customers.

Truthfully, the only difference between you and Spam Protection experts is time. If you’ll invest a little more time in reading, you’ll be that much nearer to expert status when it comes to Spam Protection.

Email spoofing:

Email spoofing involves the use of a fake email header that is written to make it look like someone other than the spammer sent the email. Very often, the spammer will make it look like the email came from a credible source such as your bank or yahoo, and try to get you to reply with personal information such as a password, social security number or credit card number. This technique is widely used because it is easy to do, and tends to catch the recipients off guard.

JavaScript:

The spammer can use Javascript that will ensure that the spam is only visible when the email is loaded. This type of spam can only be prevented using anti-spam software that decodes or blocks the java script.

Social engineering:

This spammer ploy attempts to fool the recipient into reading the junk email by pretending to be an acquaintance. It involves a junk email that has a “personal” subject line, such as “I’m leaving tomorrow,” “I got your message” or “Let’s meet again”.

Mining message boards and chat rooms:

When you post a message to a message board or chat room and leave your email address, automated programs called spambots will find your address and add it to the spammer’s mailing list. Much like a listed phone number in the telephone directory, leaving your email at these types of websites makes it public information.

Web beacons:

A web beacon, also called an “invisible GIF,” is an image sent out with spam that is invisible to the recipient. When the email is opened, the spammer will be alerted that your email address is “live.”

Open proxy, 3rd-party servers:

An open proxy is a third-party server that enables the spammers to camouflage their real identities as well as their Internet locations, when they send out their junk mail. Many spammers use these open proxy servers to help maintain their anonymity.

About the Author
By Anders Eriksson, still having the Free Adsense Templates available for instant download

How to Report Spam Abuse

Friday, May 1st, 2009

Spam is as prolific as the leaves on the trees and because there are so many kinds of it, it is a challenge to find the right site or organization to report spam to.
Each type of spam will violate the law in one way or another and each can be prosecuted if it can be proven.

Saving and sending the entire email header is an important step in reporting spam. The header of every email you receive will contain information on the full chain of computers through which the email passed in order to get to you. Generally, most email will pass through at least four computers: The spammer’s computer, the spammer’s ISP, your ISP and finally your computer. This is the most reliable way for an anti-spam service to track down the spammer’s ISP because the spammer will camouflage the “from” address.

As the email passes through each computer, information is added to the header indicating who the mail came from, as well as where they are sending it. While this header information will seem complicated, you just need to make note of the originating ISP, which will be easy to recognize. For example, if you receive your mail through AOL and you note “yahoo” in the string of information, then you will know to report the spam to yahoo.

To read the information in the email header, just right click on the email, choose properties and then either “options” or “header” depending on your email program. Then cut and paste the header path in its entirety, into the body of the email. Finally, forward the spam email first, to the spammer’s ISP, and then next to spam reporting agencies

You should also forward the spam to the Federal Trade Commission (FTC). You can do this at the website: uce@ftc.gov. While the FTC will not take action on individual incidents, they will add the spam to a database reffered to as UCE (unsolicited commercial email)

Those of you not familiar with the latest on Spam Protection now have at least a basic understanding. But there’s more to come.

A common spam scam you may come across is called a “419 Scam”, or the Nigerian Advance Fee Fraud. These spam emails generally relates a tale of woe – a death in the family and a huge inheritance that the sender needs your (financial) help to claim. As improbable as it sounds, many people have fallen for this scam and millions of dollars have been defrauded from them. Fax a copy of this spam along with the header information to the United States Secret Service.

Here is a list of the agencies you may report spam to, along with the type of email they can handle or will deal with.

The Federal Trade Commission (FTC).
www.ftc.gov/bcp/conline/edcams/spam/ – This site offers you information about the law enforcement actions that have been taken against deceptive mailers and companies and those who do not honor opt-out requests from email recipients..

www.spamabuse.org
This is a third party reporting agency.

www.spamcop.net
Another third party agency which will report spam on your behalf to the relevant anti-spam agency.

For stock fraud, email the Securities and Exchange Commission (SEC) at enforcement@sec.gov . They are prosecuting however they are only able to deal with fraud in email that has to do with stocks and bonds.

About the Author
By Anders Eriksson, who just launched this URL Shortening Service, working exactly like TinyURL.com!

Don’t Fall for the Phisher’s Bait

Friday, April 17th, 2009

Never respond directly to any unsolicited email that asks you to update or verify your personal information. Banks, stores and other legitimate businesses will never ask you to give this information via email, particularly following the advent of phishing.

If there is any doubt as to whether or not the email is from who it purports to be, contact the company immediately to confirm and clarify the request for information. Be sure to call a phone number from your statement. Calling the phone number in the email is probably a direct line to the identity thief.

Never click on a link in any such email. To do so would be to risk downloading malicious Trojan horse spyware, which will install keyloggers in your computer system. This would provide hackers direct access to all the personal data stored on your computer, which they will use for their own nefarious financial gain.

Never, ever fill out forms contained in an email that request personal information. The mere request for this information should ring a loud alarm bell. Phishers are able to use HTML to design very official-looking email messages. Any information entered into these forms goes directly to the phisher

Never trust links contained in unsolicited email. Phishers have devised ways to spoof legitimate website links. Common tricks that are used include misspelling web addresses or using sub-domains that include the name of a legitimate business.

An email link can also be “masked” in such a way that it displays a very official looking text-link to a legitimate company’s website, but clicking on it will take you to the phisher’s web site.

Knowledge can give you a real advantage. To make sure you’re fully informed about Spam Protection, keep reading.

Do not cut and paste the link contained in the message into your browser. Type the address of the legitimate company in a separate browser window, so as to bypass having to click on the link in a suspected phishing email.

Always be suspicious of impersonal email. Almost all email communication from legitimate businesses will contain some specific piece of personal information that is not readily available to anyone but you. An email from your bank, for example may include part of your account number.
Always keep in mind that here are malicious people out there who do nothing more than think up creative, innovative ways to get at your personal information.

Be sure to use anti-syware and anti-virus software, and keep these regularly updated. Anti-spam filter software may help eliminate or minimize the amount of phishing spam you will receive in your inbox.

Be very cautious of opening any emailed attachments you receive, even if they seem to be from an acquaintance.

Help catch the phishers by reporting any phishing attempts. Forward the phishing email to the company that is being spoofed. Also forward it to these email addresses as well:
spam@uce.gov and reportphishing@antiphishing.org. This information will be used by the Anti-Phishing Working Group to fight phishing. This organization is a coalition between the internet industry, and financial institutions and law enforcement.

Learn more and stay informed by visiting the Federal Trade Commission’s Identity Theft website: www.consumer.gov/idtheft.

About the Author
By Anders Eriksson (Click on the link to learn more about me)