Web User Essential Guide: Phishing and pharming

If you're concerned about phishing and pharming scams, here's our quick guide to what they are, how to avoid them and where to get help.

What is phishing?

Phishing may sound like an enjoyable countryside pursuit, but don't be fooled by the cute name. Phishing attacks are those that use spoofed emails and fraudulent websites to trick people into giving out personal financial data. Phishers hijack brand names of banks, web retailers and credit card companies and send emails that ask the recipient to click on a link to update their details on a fake website.

How to avoid phishing attacks:

• Remember that it is highly unlikely that a company will have lost your account information.
  
• Always remember that banks will never write to you asking for your password or any other sensitive information by email.
  
• If you receive a dubious email do not click on links or attachments and contact a bank or company immediately. Always type the bank or company's address in yourself.
  
• Check there's been no fraudulent activity on your account.
  
• Phishing emails often contain grammatical errors or spelling mistakes.

What is pharming?

If you thought pharming was all about milking cows and putting sheep out to graze, think again! It's similar to a phishing attack in that a fraudster ultimately wants to steal your personal information, but this time when you type in a URL from a bogus email you are redirected to a criminal's website. Fraudsters can either pretend to be the domain owner and have the bank or company's name redirected to their servers or, more commonly, a virus or piece of spyware could redirect you to a hoax site.

How to avoid pharming attacks:

• Run up-to-date anti-virus and anti-spyware software.
  
• Exercise caution over which programs you decide to run.
  
• Install a personal firewall.

Where can I go for help?

Bank Safe Online (www.banksafeonline.org.uk) is the UK banking industry’s website for helping online banking customers stay safe online. You can also forward suspected scam emails.

At the eBay UK Safety Centre (http://pages.ebay.co.uk/safetycentre/spoof.html), you can find information on protecting yourself from phishing emails and websites.

Voluntary organisation Anti-Phishing Working Group (www.antiphishing.org/consumer_recs.html) has advice on spotting phishing and pharming emails and invites you to report suspect messages.

The National Hi-Tec Crime Unit (www.nhtcu.org.uk) offers advice on reporting internet crime.

Other Web User Essential Guides
>> Viruses
>> Premium Rate Diallers
>> Keylogging
>> Spyware
>> Identity Theft

Subscribe to Web User magazine for the latest security news, advice and software every fortnight!