BEWARE OF PASSWORD THIEVESHackers resort to a variety of Techniques such as the ‘Dictionary Method’ or ‘Brute Force’ method to break Passwords. A host of Software is available in the market nowadays to come to the aid of the Professional Hacker in his ‘mission’.
Apart from trying to break your Passwords there are people trying to get your Password or your Bank details by illegal or fraudulent means. Social engineering – is a term used to refer to a collection of Techniques used to manipulate people and collect information about them without their express consent.
Almost all known tricks and devices known since the descent of man including plain lying or pretext, can be categorised under this topic. Of course the ultimate aim is to make you part with important details such as your Bank Balance, Credit Card Number or your Password. This essay is an attempt to keep you informed so that you do not become a Victim.
Some of the Techniques adopted in social engineering are listed below :
Phishing – In Phishing, E-mail or instant messaging is used to acquire information. The ‘Phisher,’ masqerades as a trustworthy person. For instance, you may get an E-mail from a non-existing bank, ‘XYZ Bank’ asking you to confirm your Financial details. The details which you provide go to the website of the Phisher. Similar attempts are made to know your Password too. Of course Anti-Phishing Software are available to counter the problem, to an extent. Read more about how to
Avoid Phising
Wiretapping, also known as Telephone tapping and is used to monitor Telephonic conversation on Internet conversation, discreetly, by using bugs - small electronic devices that fit on the Telephone line. These bugs operate in the range of 30 -300 Ghz. They are usually located within 1 to 3 kms vicinity of the user. While there is no reason to suspect every caller, all the same, never divulge your Password or discuss any important Financial details on phone.
Keystroke logging – also known as Keylogging Captures the User’s Keystrokes and uses this information to by pass other measures of Security and obtain the User’s Passwords. To counter such measures, using Keyboards other than the usual ‘QUERTY’ Keyboards, Web-based onscreen Keyboards, Firewalls, Anti-Spyware programs can be used.
Login Spoofing – is a technique where the user is presented with an ordinary looking login prompt for Username and Password. This login is actually a malicious program ( usually a Trojan Horse). When the Username and Password are given, this information is passed on to the Attacker, breaching Security. In an attempt to prevent such Spoofing certain operating systems – for instance Windows operating system – compel the use of special attention keys ( for eg. The keys Ctl + Alt + Del) before a login screen is presented. Read more about
How Can I Protect Against Trojans
Dumpster Diving – Though this term generally means ‘looking for, or rather retrieving usable items among discarded garbage or trash,’ it also includes searching for Files, Letters, Memos, Photographs, IDs, Passwords, Credit Cards etc. from discarded Diaries, Notepads etc. Therefore before you Discard anything, ensure that it does not contain any information which can be Misused.
Acoustic Cryptanalysis – is a Technology that is used to obtain Passwords, PINs by recording and analysing the difference in the sounds produced by different keys during data entry.
----------------------------------------------------------
As days go by, the Techniques adopted by the unscrupulous to attack the gullible keep growing. Now that you know some of the methods adopted, we end this article with only one word of Advice – Beware!
Return from
Beware Of Password Thieves - to - Passwords Homepage
|
