Phishing: Difference between revisions

Revision as of 23:18, 7 February 2006

Revision as of 00:25, 8 February 2006

Line 2:

<!-- FAIR USE of Image:Phishing-Email-Image-Bank-2.gif: see image description page at http://en.wikipedia.org/wiki/Image:Phishing-Email-Image-Bank-2.gif -->

[[Image:PhishingTrustedBank.png|right|thumb|280px|This phishing attempt, disguised as an official email from a bank, attempts to trick the bank's members into giving away their account information by "confirming" it at the ''phisher'''s linked website.]]

In [[computing]], '''phishing''' is thea nameform of Christina[[social Carbone'engineering (computer security)|social engineering]], characterized by attempts to [[fraud]]ulently acquire sensitive information, such as [[password]]s dogand [[credit card]] details, by masquerading as a trustworthy person or business in an apparently official electronic communication, such as an [[email]] or an [[instant messaging|instant message]]. The term ''phishing'' arises from the use of increasingly sophisticated lures to "fish" for users' financial information and passwords.

With the growing number of reported phishing incidents, additional methods of protection are needed. Attempts include [[legislation]], user training, and technical measures.