Phishing Countermeasures Unleashed

In this article I have my best to gather and explain all those possible ways by which phishing can be avoided. Here I am going to explain Phishing counter measures in very details. As you know phishing is kind of technical and psychological attack on human nature, which make him/her to reveal their sensitive information to the attacker. For more information on phishing you may visit Wikipedia and search for a topic “Phishing”. Here I am going to provide you all possible counter measures for phishing attacks.

INTRODUCTION

Phishing attack is a complex combination of technology as well as psychology. There are numerous ways in which people are being made fools and they can be conned by hitting on unsecured website links. Especially with the growing of the marketing industry, these types of attacks are being risen. 2007 case study shows that phishing attackers were collecting and purchasing Google AdWords in order to install RAT on victim’s systems. By this attacker can click on a couple of adds through which they can earn some money.

1.    Auto Generate Domain Specific Password
Many researchers have developed such kind of  mechanism in which when you give username and password, it turns into domain specific password and that is even via transparently method. The basic idea behind this is to hashing of passwords with a secret key along with website domain name. Web site domain name is very important because it will tell that password to go into that domain [1].

TO READ FULL ARTICLE CLICK HERE ...

Download Login Spoofer 2010: Hack Yahoo Account Passwords: Facebook Passwords Hacking

Download Login Spoofer 2010: Yahoo Password Hacking: Hotmail Password Hacking: Gmail Password Hacking: Facebook Password Hacking & Many more..!!

Login Spoofer is a Software that it can create Professional Phishing Pages Like: (Hotmail, Yahoo, Gmail, GameZer, Facebook and many more ....) to Steal somebody's Account you have to push him to login in one of your fake pages, when the Victim Login as you told him, His account (Username/Password) will register in our database So you go to the software (Login spoofer) and press refresh then you'll find His Username & Password & IP & his OS Info...etc. Using and Downloading is free 100%.

• Yahoo Password Hacking: Hack Yahoo Account Password with phishing attack.
• Hotmail Password Hacking: Hack Hotmail Account Password with phishing attack.
• Gmail Password Hacking: Hack Gmail Account Password with phishing attack.
• GameZer Password Hacking: Hack GameZer Account Password with phishing attack.
• Facebook Password Hacking: Hack Facebook Account Password with phishing attack..& many more..!!

Download Login Spoofer 2010: DOWNLOAD HERE

Password: www.freehacking.net

Tabnapping Attack Tutorial: Phishing Attack Tutorial

Tabnapping Attack Tutorial: Phishing Attack Tutorial

Tabnapping - Phishing in mulitabbed environment of browsers

This is my first post in this blog, a great opportunity for me to write in this blog. My first post is on a simple hacking trick which is phishing but in a new way. This new way of phishing is known as Tab Napping. The basic steps are same as traditional phishing attack. Phishing is the most popular and widely used method for hacking email accounts. Phishing is not as easy as it's name. Creating a phishing page is an easy task and any one can download it from various hacking forums for free. The main step of phishing comes after creation of fake login page.

How to send this fake page to the victim??

Here comes the Tab Napping which can make your second step easy than before. No need to send fake page via email to victim.

Tab Napping use the modern browser's multi tabbed environment. Now a days all people use multiple tabs for accessing Gmail, facebook, orkut and other websites simultaneously. The trick is to confuse user in his/her multiple tabs and redirect any of idle ta of his browser to your phishing silently. Tab Napping works on the user's assumption that a tabbed web page stays the same when other Internet services are being accessed.

The idea behind this is very simple and is done by javascript. Tab napping is all about the relation of 2 pages. suppose Page A and Page B. Victim was viewing page A in a tab of a browser and then left this idle and and now using some other website in another tab of browser. If the user will not return to page A for some pre-specified time, page A will automatically redirect to Page B. This Page B is your phishing page. This redirection and cheking for user actions is done by Javascript. You can download it for given link.

Make a web page and use the tab napping script in that page say it page A. This script will not affect the layout or content of the page. This script will check for user actions. If the page is idle for some time, this script will redirect this page to a pre-specified page which may be your phishing page. You have to specify this page in the script. Be sure to change this in script.
check script for this line...

timerRedirect = setInterval("location.href='http://www.gmail.com'",10000);

this line will redirect to Gmail after 10 sec. Change this location to the address of your phishing page. This line is used 2 times in the script so change is both lines.

so page A with tab napping script will redirect to phishing page B.

Now send the link of the page A to your victim. This is a normal page. If the page is idle for some time it will be changed to page B otherwise no effect.

Download Here:

http://www.ziddu.com/download/12640258/tabbednapping.rar.html

Fake Twitter Phishing Email from the address “support@twitter.com ”

Today Morning I received one mail which did not get caught by Gmail’s spam filter. It had me believing it was real since I hadn’t seen phishing email pretending to be Twitter before.

The email was supposedly from the address “support@twitter.com ” telling me my account was suspended for excessive following. You can see a screenshot the email.

While I knew I hadn’t recently followed a bunch of people, I thought maybe someone had hacked my account and followed people and that the email might be legit, until I read that I needed to click a link to “complete some offers” for to avoid account suspension.

After that when I check my twitter statistics, its 10000% Phishing attack. Check the below screen shot.

Further examination revealed the link to be “http://mexico.cnn.com/redirectComplete.php?url=//bit%2Ely/ouvgwt” which redirects to “http://emailus.it.tc/” where you can see offers to complete.

Obviously, not from Twitter. Beware.

UPDATE: I just send an email to twitter on support@twitter.com and below is the response.