Close
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Menu
Search
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Latest News
    • Blogs
    • Security Watch

    Zscaler Finds Gmail Phishing Website

    By
    Fahmida Y. Rashid
    -
    August 27, 2011
    Share
    Facebook
    Twitter
    Linkedin

      Security researchers at Zscaler recently came across a phishing Website masquerading as a Gmail login page. Unless users are very vigilant, they can easily be tricked by the page, according to Umesh Wanve , a senior security research engineer at Zscaler.

      Cyber-attackers are increasingly using phishing scams to fool victims and steal sensitive information. “Such attacks will never go away as phishing is a trivially easy attack vector,” Wanve wrote on Zscaler Research Aug. 22.

      A number of popular Websites are regularly targeted in phishing campaigns, such as the login page for Google’s hosted email service, Gmail. The phishing page the Zscaler team uncovered is “largely identical” to a legitimate Gmail login page, Wanve said.

      “There are plenty of such websites are present on the Internet and users should be cautious any time they are entering login credentials,” Wanve said.

      In the case of this particular Gmail phisihing page, the address is clearly not gmail.com or mail.google.com, but some random domain such as kphb2040.com. The copyright notice at the bottom of the page is out of date, claiming to be from 2006.

      The differences are so subtle as to be worrisome. How many people look at the copyright date or the URL when going to known and trusted sites? As paranoid as I am, I can’t even recall the last time I checked the date on the bottom of the screen. I do occasionally check the URL, but more to verify I am in the right place if something else triggers my suspicious-meter.

      It’s not a regular habit to check the URL, although the new feature in Internet Explorer 9 and Firefox 6 which grays out the URL except for the domain name does make it much easier to do so.

      Wanve suggested that checking the URL should become a regular habit, especially just before entering any sensitive information on a Webpage. He also recommended that users avoid clicking on links to get to a page, but to manually enter the Website address in the address bar when possible.

      Users who get tricked into entering the username and password on this page will be redirected to the legitimate Gmail login page. This way, the victim assumes that the initial login wasn’t successful and has to retry again, Wanve said. Even if the victim catches on and relies it was a scam because Gmail didn’t display an error message, it’s already too late as the data has been transmitted to the malicious server and saved.

      Avatar
      Fahmida Y. Rashid

      MOST POPULAR ARTICLES

      Android

      Samsung Galaxy XCover Pro: Durability for Tough...

      Chris Preimesberger - December 5, 2020 0
      Have you ever dropped your phone, winced and felt the pain as it hit the sidewalk? Either the screen splintered like a windshield being...
      Read more
      Cloud

      Why Data Security Will Face Even Harsher...

      Chris Preimesberger - December 1, 2020 0
      Who would know more about details of the hacking process than an actual former career hacker? And who wants to understand all they can...
      Read more
      Cybersecurity

      How Veritas Is Shining a Light Into...

      eWEEK EDITORS - September 25, 2020 0
      Protecting data has always been one of the most important tasks in all of IT, yet as more companies become data companies at the...
      Read more
      Big Data and Analytics

      How NVIDIA A100 Station Brings Data Center...

      Zeus Kerravala - November 18, 2020 0
      There’s little debate that graphics processor unit manufacturer NVIDIA is the de facto standard when it comes to providing silicon to power machine learning...
      Read more
      Apple

      Why iPhone 12 Pro Makes Sense for...

      Wayne Rash - November 26, 2020 0
      If you’ve been watching the Apple commercials for the past three weeks, you already know what the company thinks will happen if you buy...
      Read more
      eWeek


      Contact Us | About | Sitemap

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Property of TechnologyAdvice.
      Terms of Service | Privacy Notice | Advertise | California - Do Not Sell My Information

      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×