The Technical Side of Phishing and How to Prevent It

Phishing, by definition, is the act of defrauding an online user and tricking them into clicking on a malicious link in order to obtain personal information by posing as a trustworthy institution or entity. That is why users have a hard time differentiating between a legitimate and a malicious site. Although one might think the very act of concealing oneself by mimicking makes the task of identifying the real or phishing page harder, it can be quite the contrary. In the effort to conceal their forgery, patterns and behaviors emerge. Below, we explore how we found those patterns and exploited them to correctly discriminate between a trustworthy institution and someone merely posing as one. [Read More]