Sunday 19 February 2012

Your Social Account Could Be Hacked This Way

Your Social Account Could Be Hacked This Way
This is how your id will be hacked:


STEP 1
You get a mail from your social friend about some funny happening. In this case I get a request from my one of my twitter friend. It asks me to visit twitter and log in. In disguise it takes me to http://itwitier.com/login/sessions/ [the fake URL: Opens in mobile browsers. Most modern desktop browsers block it]
Fake Twitter Login Mail
STEP 2
You login to your account from the link given in the mail. The site you land up is visually no different from the actual thing.
Fake Twitter: Visible similar to main site
Actual Twitter
And now this is how you can avoid this:
STEP 1
If the URL is linking to anything different to the main URL, don't visit.
Ex:
*. twitter.123.com
*. xyz.twitter.com
*. facebook@login.com
Check the site name from the hyperlink and not from the printed label, ex: this link https://www.facebook.com does not redirect to facebook.
Check here for more tips.
STEP 2
Most site which ask for user name and password have a secure https version. So in the URL change http to https. This is especially needed when you are doing some banking transaction. Check here on how https is helpful.
Check for https
STEP 3
Keep your browser updated. IE 6 users aremore prone to falling in trap than IE9 user. So, regularly update your browser. If you get an phishing Detected message, don't proceed.
Phishing Detection in IE
For Google Chrome users, don't use beta versions for banking transactions, they have open loopholes for hackers to dig in.
Adding to it Chrome does not show "http" and "https" unlike IE.
IE URL
Chrome URL
So, next time you are in doubt, apply bit of caution and knowledge. Happy Browsing.

No comments:

Post a Comment