The technique that consists of sending by a Cybercriminal an Email to an user pretending to be a legitimate entity such as a social network, bank, public institution, etc. With the aim of stealing private information. Phishing-type emails generally contain a link to a false page that impersonates the identity of a company or service in which, if we enter our data, it will go directly to the scammer, but this time, what types of phishing can we find?<\/p>\n\n\n\n
\u25b8Spear phishing<\/em><\/strong><\/p>\n\n\n\n The main difference of this class is that it is aimed at individuals or small groups. In this way the campaigns are much more personified and with a higher percentage of victims. Rarely are cases that affect banks or social networks, because they do not seek massiveness but quite the opposite; in reality, this type of method is used in attacks such as APTs, targeting employees of companies with specific profiles. <\/p>\n\n\n\n This means that victims could receive emails impersonating first and last names, even falsifying known addresses to generate greater empathy and trust from an unsuspecting navigator.<\/p>\n\n\n\n \u25b8Traditional phishing<\/em><\/strong><\/p>\n\n\n\n This type of attack is the simplest when it comes to technically analyzing it; it is usually linked to a copy of a site known to the victim, in which the address where the entered data arrives is changed. <\/p>\n\n\n\n The cybercriminal steals the credentials entered by the victim, which may be stored in plain text in a text file or sent to an email box. The main characteristic of traditional phishing is that it is linked to a single website on which all the contents of the fake portal are hosted.<\/p>\n\n\n\n \u25b8Redirected Phishing<\/em><\/strong><\/p>\n\n\n\n This technique is used in massive campaigns, although these attacks have a very low percentage of victims, there is a large number of affected users and compromised credentials.<\/p>\n\n\n\n This procedure has a higher level of complexity and uses at least two or more sites or domains to perpetuate the scam. We can highlight three techniques that experts commonly detect, which correspond to the use of shorteners in URLs, the injection of the well known Iframes and the exploitation of techniques linked to frames in the HTML code.<\/p>\n\n\n\n \u25b8Smishing<\/em><\/strong><\/p>\n\n\n\n This type of phishing is related to the use of another digital channel such as cell phones. Criminals usually impersonate known entities and send a text message alerting the victim that they have won a prize. As it usually happens, the objective of this operation is to obtain an economic profit, which is often linked to scams in different ways.<\/p>\n","protected":false},"excerpt":{"rendered":" The technique that consists of sending by a Cybercriminal an Email to an user pretending to be a legitimate entity such as a social network, bank, public institution, etc. With the aim of stealing private information. Phishing-type emails generally contain a link to a false page that impersonates the identity of a company or service […]<\/p>\n","protected":false},"author":1,"featured_media":1669,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,12],"tags":[143,184],"class_list":["post-1668","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-phishing","tag-cyberattacks","tag-phishing"],"yoast_head":"\n