An Investigation on Vulnerability Analysis of Phishing Attacks and Countermeasures

Abstract

A great venue for communication amongst regular people is the internet. Many efficient communication methods are available online, such as email, mailing lists, discussion forums, chat services, online conferencing, and blogs. Social networking websites like Facebook, Instagram, and Twitter have recently entered the picture. People who want to steal personal information have discovered a technique with the least chance of getting detected without meeting the target, known as phishing. Phishing is a cybercrime that targets passwords, banking information, credit card information, and personal identification through emails, phone calls, and texts. Mostly, online identity theft takes the form of phishing. The phisher uses social engineering to obtain the victim's account and personal information. A person, a group, or a cluster within a group of people might be the target. In the modern-day, cybersecurity is a major worry to provide a realistic experience of phishing attacks. The present paper investigates and analyses various phishing tools that can simulate such attacks. In addition, the paper investigates the prevention methods and countermeasures. It also examines the kinds of phishing tools, like Zphisher, CamPhish, and PyPhisher, being used to ensure that even people apart from experts can be aware of what a phishing attack is and how to alert others about the risk they pose and how to be prepared for them associated with the recent threats of Crelan Bank and Uber.

Transactions at Your Fingertips: Influential Factors in Information Security Behavior for Mobile Banking Users

“…Phishing is a form of crime in the cyber world. One of the entrances for cybercriminals to commit phishing is through email, which sends messages that seem to come from trusted sources; victims are deceived and enter the spam web so that the personal information they have can be obtained by the perpetrator [8]. Previous research with business employee respondents identified effective email management practices as a key contributor to encouraging positive information security behaviors [17].…”

“…In general, cybercriminals directly attack end-users. Phishing is a cybercrime that uses texts, phone calls, and emails to obtain personal identities, banking information, credit card details, and passwords, by sending legitimate-looking emails or creating pop-up windows that appear to come from a trusted source to trick victims into providing their personal information to fake websites, and sometimes transferring malware to access victims' personal data [8]. Cybercriminals want to obtain credential information from users; this information is used to access the user's account so that the perpetrator can freely act as if they are the account owner.…”

An Experimental Study on Detecting and Mitigating Vulnerabilities in Web Applications

“…If the attacker hacked the web application, they could access all the confidential or sensitive data available in the web application. It leads the attack to the next stage of an attack [3]. For example, if an online shopping website's credit or debit card details are saved, and the attackers hack the website, they can obtain the full card details and use them to steal money from the victim's account.…”