Don’t get caught by the Phisherman!

1. Don’t get caught by the Phisherman! Craig Bennion University of Utah October 28, 2010

2. What is phishing? Phishing is a social engineering scam that relies on both technology and human interaction to conduct online fraud and identity theft.

3. Hook, Line and Sinker!! Prize Drawing Entry Form (Must be present to win) Name: Address: City, State, Zip: E-mail: Birthday: Why??? – You’ve been phished!!!!

4. Why does it happen? $$$

5. It’s just my info. It doesn’t matter… … G.E. Money Bank seems unwilling to believe. They're demanding payment for a 2009 "street/sport motorcycle." It’s a bike supposedly purchased by Tom in May from a dealer in California. But Tom wasn't in California in May. “I had my identity stolen,” Tom says. And the crook made fast work, opening lines of credit in Tom's name all over the place. Tom has received dozens of collection notices, each one, its own hassle. Tom has had to call, fax police reports, provide timecards showing he was at work in Utah at the time. And eventually, every creditor believes him. His identity was stolen. The debt isn't his. Channel 2 News, October 22, 2010

6. It’s just my info … Information posted to social networking sites can be a valuable resource for some, as targeted phishing attacks use validated information harvested from the web and identification checks used by legitimate sites. The danger of putting too much personal information online, particularly on social networking sites, was brought to light when the wife of the chief of the British secret service MI6 posted highly revealing details about their residence and friends on her Facebook page. But don't forget that leaky social networking profiles aren't just a security issue for spy chiefs and their families. Millions of home users and office workers may be sharing too much information online, and being careless with their privacy settings - potentially allowing all kinds of unwelcome people to gather information about you. Sophos.com - Graham Cluley’s blog

7. Gone phishing lately? • Enter to Win a Nikon D3100 Digital Camera! • From "Dummies.com Newsletters” • Hello friend. I am needing your help. I have 25 Million in secret Nigerian government account. Give me your bank account number and it’s yours. • $25,000 Weekly Giveaway Starts Now! - ZAGG.com • From "ZAGG Inc.” • Help, I'm Stuck in London and Can't Get Home • Monday October 11, 2010 • You have a Hallmark e-card • Log on to server to see it. No account? Create one here.

8. How can I avoid getting caught? Use Common sense! • If it’s too good to be true, it probably is • If you’re not expecting it, don’t open it! • If you don’t know sender, don’t open it! • Don’t give up personal information without knowing how it will be used!

9. Be Smart! Act Smart • If you’re not expecting it, don’t open it! • Do not accept software installation from a source you’re not sure is secure • Do not ignore browser alerts, security warnings, etc. • Use the address bar and other indicators to know where content is coming from Employ Protection Software • Use an antivirus, an anti-malware tool & a personal firewall • Consider using Firefox’s “NoScript” extension Stay Current • Update your operating system, browser, and other software regularly • Ensure your protection software is updated frequently

10. Questions? Contact Information: Craig Bennion craig.bennion@utah.edu