By The amount of phishing-attacks grows fast in spite of security developing companies efforts to low it. RSASECURITY issues monthly phishing-attacks reports which can be bought at company official website . The big problem is that victims hide the statistics as the fact of successful phishing-attack is just a serious threat for the organization reputation.
The classic phishing-attack looks as follows. Let’s assume that a fraudster decided to capture confidential data that offers use of the account management zone on X bank website. Fraudster must entice a victim to a false website that represents a copy of X bank site. It is done to be able to make victim enter his/her private data convinced that he or she is really using real bank website. As a result fraudster gets full use of victim’s account management.
Protecting yourself from phishing attacks is an arduous task that needs combined approach. It’s often essential to reexamine the existent client work scheme and complicate the authorization process. As a result client is subjected to additional inconvenience and company spends a bundle to guard itself. 토토사이트 That is why companies usually don’t follow this way. Reliable, widespread and cheap verification which can be user friendly is the important thing aspect in phishing-attacks prevention. The utmost effective verification that in reality protects from phishing attacks is automated telephone verification.
There’s several Service Providers such as ProveOut.com that offer inexpensive, simple in integration and at the same time frame effective solution – verification via telephone. Verification is processed instantly without the need for an operator.
Let’s examine what might happen if telephone verification was used in the phishing attack described above. A unitary step should be put into the authorization procedure at bank’s website: call to previously stored customer’s phone number.
As soon as customer enters correct login and password information, bank sends a request with customer’s contact number and a randomly selected code to Service Provider. Service Provider makes a call to user’s contact number, dictates the code passed by the lender to the consumer and then hangs up. User then enters provided code in corresponding field and proceeds to restricted access area.
For the calls’ processing Service Providers use VoIP technology which allows to help keep the expense of a single verification call low. In case call’s cost to specific destinations will undoubtedly be regarded as being excessive phone verification service may be used selectively e.g. a verification call can be initiated only in case there is account operations. Phishing will not succeed for such site as an additional security measure can be used – automated telephone verification