November 27, 2007

Solution to phishing attacks

Phishing attacks have increased a great deal and the joint survey by Yougov and Cloudmark on this issue indicates that the UK is one of the European nations that have  high degree of email phishing attacks. Phishing emails often refer to the fraudulent ones that deceive the users with their genuine-looking false guidelines and make them to reveal their personal information. Phishers often use the names of big firms in their fraudulent emails thus many people who receive them tend to be deceived by them.

According to survey taken by Yougov and Cloudmark, a provider solution to spam issues, more than one-fourths of the people surveyed (1960 adults) expressed that they should protect themselves from phishing attacks by being more alert and aware of these issues.

Twenty-three percent of the surveyed adults felt that their broadband service providers  should have better spam filters on their email servers as they are responsible for the online security of their customers. Likewise, some people (17%) pointed their fingers towards the sender’s service provider or the email service provider as responsible for the phishing attacks.

However, Nigel Stevens of THUS felt that both users and the ISPs should assume responsibility and take steps to prevent email phishing attacks.
"Whilst awareness to the problem is essential, it is unrealistic to expect businesses to be able to secure themselves fully against such sophisticated criminal activities. The increasingly dynamic and transient nature of the latest threats requires a combination of desktop protection at the client level, and accurate message filtering from ISPs,"

Cloudmark, the anti-spam expert says that VoIP is more vulnerable to phishing attacks as the VoIP system comes with relatively lesser security features. Neil Cook of Cloudmark tells us how the deception takes place:
"If the recipient makes the call, it gets routed to a cheap VoIP answering system, which may have been set-up on a compromised host. The system captures the user ID and pincode to sell on to the highest bidder, who then has full access to your account. All the while the call seems very genuine. The reassurance of speaking to an individual rather than working online will lead to many instances of consumers falling foul to such threats."

• Comment

Leave a Comment