Sams Teach Yourself TCP/IP in 24 Hours, Fourth Edition

Going Phishing

The widespread use of firewalls, encryption techniques, and other security measures has made it more difficult for intruders to simply waltz right onto the network uninvited. The attackers have responded with their own new generation of techniques for foiling these security measures. One important new strategy is to entice the unsuspecting user into launching the attack by offering a fraudulent link, email message, or web page as bait. This type of attack falls under the category of phishing. A phishing attack might consist of an email message that asks the user to login to an online banking site and update account information but actually leads to a faked web page managed by the attacker.

Phishing attacks often exploit the fact ...