Social Engineering Series

Pharming is a type of online fraud intended to redirect a website’s traffic to a fake site with the purpose of gaining access to personal information that can be used in online identity theft. This scam can be so convincing that even what may appear to be a real website address can be “poisoned.” Once the user enters personal information such as their credit card or email address, this is where the real problems can occur.

Continue reading below for more information on the different types of Pharming as well as tips to protect yourself while browsing online. 

2 Types of Pharming

Malware-Based Pharming

Attackers can take advantage of a user by installing malware on their device that will redirect the user to a bogus website. The site will be made to look identical to a legitimate website, but may have a slight variation to the address (i.e. www.Amazn.com). When the user enters in their personal information such as credit cards or email addresses they can be made vulnerable to identity theft.

Website Takeover

Another type of Pharming is when the hacker gains access to a legitimate site by exploitation of a vulnerability in the DNS server software. DNS servers are computers responsible for resolving Internet names into their real addresses. With this compromise, the hacker can then divert website traffic from a real website to a different IP address. In this case, the visitor would have a very difficult time identifying that they have even been redirected from the intended website. 

Precautions to Avoid Pharming

1. Use Antivirus Software. By making sure that you have an antivirus program on your computer it can help decrease your chances of being exposed to scams caused by malware.

2. Check for Spelling. The spelling of a website address can inform you if it is a fraudulent one. Bogus websites often times contain typos and misspellings throughout not only the website address, but also throughout the content on the page.

3. Check the URL. Make sure that the URL that you are visiting is the one that you intend to use. Be sure that there are no additional characters in the URL that do not look familiar.

4. Check the ‘HTTP’ address. Verify that the website you are visiting uses “https” at the beginning of the address. The extra ‘s’ means ‘secure’.

5. Look for Padlock. If there is a padlock icon before the https, that means that the website is secured. However, if there is an unlocked padlock and a broken key this means that the site is not secure.

How Can iLOCK360 Help?

Did you know that your iLOCK360 membership can help alert you if your personal information may have been sold in online identity theft forums?

iLOCK360’s proprietary CyberAlert can help you monitor your identity 24/7/365 for possible compromise on the Dark Web (i.e. the Internet’s black market). Available monitored elements include: Bank Accounts, Credit/Debit Cards, Email Addresses, Phone Numbers, Medical ID Numbers, Social Security Number, Driver’s License and Passport.

Want to know if your information may have been compromised by a cybercriminal on the Dark Web? Be sure to log into your iLOCK360 account to setup this feature today.

SMiShing (short for SMS Phishing) is a type of social engineering scam that involves getting a text message from a false sender. The attacker will typically pretend to be a reputable source (such as your bank or PayPal), or claim that you have won a special prize and urge you to take action. Additionally, these texts are often sent with harmful links that spread malware to your device or steal your personal information. Read on to review the most common types of SMiShing scams and suggested tips to help you avoid this increasingly common fraud. 

The video below gives more information about this recent crisis:

The Four Most Common SMiShing Scams

6 Tips to Avoid SMiShing

1. Research
Research before you respond to a text that claims to be from a source that needs your information or for you to clink a link.

2. Nothing is ever free
When being told that you earned a “free trip”, “prize money”, etc. it is most likely a gimmick to entice you to divulge your personal information or release malware into your phone.

3. Do not reply if being asked about your personal information or finances
If you are asked to provide any personal or financial account information, this should be an automatic red flag. Your bank or other service provider will never text you for this type of information.

4. Avoid messages that contain “5000”
Lookout for messages that contain “5000” or display a number that is not an actual 10 digit phone number because this is a tactic often utilized by scammers to hide their identity and become untraceable.

5. Enable “block texts from the internet”
Your cell phone provider might offer a feature that will allow you to avoid spam text messages that have originated via the internet or an email address (not from another device).

6. Report SMiShing attacks to the Federal Communications Commission (FCC).
The FCC is committed to protecting consumers from unwanted telemarketing calls and text messages, and works closely with industry representatives to give consumers more control over the calls and texts they receive. You may also file a complaint with the FCC if you believe that you’ve received an illegal call or text.

How can iLOCK360 Help?

Did you know that your iLOCK360 membership can help alert you if your phone number may have been compromised?

iLOCK360’s proprietary CyberAlert can help you monitor your identity 24/7/365 for possible compromise on the Dark Web (i.e. the Internet’s black market). Available monitored elements include: Bank Accounts, Credit/Debit Cards, Email Addresses, Phone Numbers, Medical ID Numbers, Social Security Number, Driver’s License and Passport.

Want to know if your phone number may have been compromised by a cybercriminal on the Dark Web? Be sure to login to your iLOCK360 account to setup this feature today.