Sunday, May 23, 2010

Is it a coincidence i got a sign on my pc screen saying warning spyware detected & now an email from ebay?

An email from ebay i never registered with, its saying comfirm ur email registeration with ebay by clicking it, is my PC hacked? why wud this mail come to my email as i hae dozens of emails, but i never registered with ebay.

Is it a coincidence i got a sign on my pc screen saying warning spyware detected %26amp; now an email from ebay?
They are two unrelated things.





The first might have been just an internet popup. If the popup is consistent, you might want to scan for spyware.





The second is an example of phishing.





What is phishing?





In computing, phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. eBay, PayPal and online banks are common targets.





Phishing is typically carried out by email or instant messaging, and often directs users to send account information or password via email to verify account or enter details at a website, although phone contact has also been used. Phishing is an example of social engineering techniques used to fool users.








What you can do about it?





1. None of the major organizations would request passwords or other personal details via email. If you are receiving such an email, it is most likely a case of Phishing. Never send your password, credit card number or other sensitive information via email or instant messaging.





2. Nearly all legitimate email messages from companies to their customers contain an item of information that is not readily available to phishers. Some companies, for example PayPal, always address their customers by their username in emails, so if an email addresses the recipient in a generic fashion ("Dear PayPal customer") it is likely to be an attempt at phishing.





3. Some criminals have gone a step ahead to create entire websites that look similar to the original organization website. When you enter data on such sites, the information actually goes to the phisher and not to the organization. Rather than clicking on hyperlinks within such emails, type the actual website address of the company in a new browser window. For example, if an email claiming to be from Bank of America, requests you to log on to your account. Rather than logging on to the site using the hyperlink in the email, type the genuine website address manually into a browser window (in this case www.bankofamerica.com).





4. Another hint is that Emails from banks and credit card companies often include partial account numbers (first four or last four of your account number). However, this is not a reason enough to trust the email as these numbers might be same for all clients of an organization and hence being abused by the attacker.





5. Lastly, it is a sensible precaution to contact the company from which the email apparently originates to check that the email is legitimate.





6. Delete the email.
Reply:could be advertising or you went into a sight that found it a threat


No comments:

Post a Comment