sbisson: (Default)
sbisson ([personal profile] sbisson) wrote2004-12-31 03:11 pm

So you think you can identify phishing email?

Take a look at this phishing IQ test, and see how well you do against a sample of ten real emails...

(I got one wrong because I was too suspicious!)

I got 9 out of 10 too

[identity profile] cobrabay.livejournal.com 2004-12-31 07:29 am (UTC)(link)
I was suspicious of one which turned out to be legit. Of course it is much harder to spot the real from fake when you can't see the headers, and you can't see URLs the links are pointing to.
Anyway, wanna buy a Rolex?

Re: I got 9 out of 10 too

[identity profile] del-c.livejournal.com 2004-12-31 08:04 am (UTC)(link)
[doubletakes on the user name]

Hey, I thought you didn't do LJ!?

Re: I got 9 out of 10 too

[identity profile] cobrabay.livejournal.com 2004-12-31 08:35 am (UTC)(link)
I got an account when the [livejournal.com profile] redemption_con community was set up.
damienw: (Default)

Re: I got 9 out of 10 too

[personal profile] damienw 2004-12-31 08:20 am (UTC)(link)
Me too; also, knowing I am not a [[bank name here]] customer helps...

[identity profile] del-c.livejournal.com 2004-12-31 08:02 am (UTC)(link)

I got a rather clever phishing telephone message on my answering machine the other day, for all the world like a nervous young man who isn't comfortable talking to answering machines, saying he's been trying to contact someone in my household who entered a contest, to tell them they've won a big prize.

The only thing that let it down (apart from "you've won a big prize", which is the natural giveaway these days) was the preceding lady saying "you have -one- message in your voicemail box". Why did they do that? My answering machine doesn't say that, and nor would anyone else's.

[identity profile] alexmc.livejournal.com 2004-12-31 08:35 am (UTC)(link)
I got an SMS delivered to my land line the other day. BT had kindly converted it to computer generated voice and left it on my answerphone.

It was a wrong number :-)

[identity profile] red-cloud.livejournal.com 2004-12-31 08:41 am (UTC)(link)
8 out of 10. Too suspicious by half (or is that twice as suspicious?)

Only 4 out of 10

[identity profile] neilf.livejournal.com 2004-12-31 10:31 am (UTC)(link)
But then as I don't deal with a lot of the companies mentioned, I would automatically bin the email if it was in my inbox. :)

- Neil.

[identity profile] vicarage.livejournal.com 2005-01-01 08:04 am (UTC)(link)
8/10. I saw nothing wrong with the messages from ebay and Paypal.

[identity profile] pickledginger.livejournal.com 2005-01-03 03:21 pm (UTC)(link)
I knew those two were wrong, but I was mistaken about the MSN.

Mostly, there just wasn't enough info to judge - even less than one has in real life, as it wasn't possible to check the full headers.

I wasn't terribly impressed with some of the site's advice on how to detect a phishing expedition, either - they went on about how a real email would have permitted a response, and would have had a phone number at which the sending institution could be contacted. Um, no, in many cases, not.

On the other hand, I just don't use "click here" boxes in email, as I don't really trust email from much of anybody.

If I receive an email claiming that I need to update something on an account, I make a note of it. Then, later, after I've closed the browser, cleared the temporary Internet files, and rebooted the computer, I go to the site directly.

[identity profile] vicarage.livejournal.com 2005-01-03 03:36 pm (UTC)(link)
Very sensible and cautious. I only wish I could be that organised, but the impulse is always to sort it now.

[identity profile] pickledginger.livejournal.com 2005-01-03 05:49 pm (UTC)(link)
I don't think it's so much a matter of organization as motivation; I've known a couple of people who've really been burned, and it would be so easy ...

[identity profile] pickledginger.livejournal.com 2005-01-03 05:52 pm (UTC)(link)
... and after seeing it happen to them, I'd feel such an idiot ...

[identity profile] pickledginger.livejournal.com 2005-01-03 05:56 pm (UTC)(link)
Lovely new poker icon you've got there!

;-)