Exploring Historical & Emerging Phishing Techniques

International Journal of Network Security & Its Applications (IJNSA), Vol.5, No.4, July 2013
DOI : 10.5121/ijnsa.2013.5402 23

Marc A. Rader1 and Syed (Shawon) M. Rahman2, *
1CapellaUniversity, Minneapolis, MN, USA and Associate Faculty, Cochise CollegeAZ, USA
Mrader3@CapellaUniversity.edu
Associate Professor of Computer Science at the University of Hawaii-Hilo, Hawaii,
USA and Part-time Faculty at Capella University, Minneapolis, USA
*SRahman@hawaii.edu
ABSTRACT
Organizations invest heavily in technical controls for their Information Assurance (IA) infrastructure.
These technical controls mitigate and reduce the risk of damage caused by outsider attacks. Most
organizations rely on training to mitigate and reduce risk of non-technical attacks such as social
engineering. Organizations lump IA training into small modules that personnel typically rush through
because the training programs lack enough depth and creativity to keep a trainee engaged. The key to
retaining knowledge is making the information memorable. This paper describes common and emerging
attack vectors and how to lower and mitigate the associated risks.
KEY WORDS
Security Risks, Phishing, Social Engineering, Cross Site Scripting, Emerging Attack Vectors, DNS poising.
1. INTRODUCTION
Phishing is a social engineering technique that is used to bypass technical controls implemented
to mitigate security risks in information systems. People are the weakest link in any security
program. Phishing capitalizes on this weakness and exploits human nature in order to gain access
to a system or to defraud a person of their assets.

Is Your Son a Computer Hacker?

1. Has your son asked you to change ISPs? Most American families use trusted and responsible Internet Service Providers, such as AOL. These providers have a strict "No Hacking" policy, and take careful measures to ensure that your internet experience is enjoyable, educational and above all legal. If your child is becoming a hacker, one of his first steps will be to request a change.....
Adrian Lamo and FBI Cyber Squad computer scientist Russell Handorf

10/18/12 Update: 2006 posting at forum - where Russell Handorf still contributes using his "grey hat hacker" handle "satanklawz" - suggests he has been working for FBI three years earlier than his resume claims; Adrian Lamo admits being "friends" with Handorf but still won't answer any real questions; Chet Uber offers to have Lamo "interview" me - Neal Rauhauser, who claims he has nothing to.....
Glue³.bas

— ——• Glue³.bas by méèh •—— — 'This is My Seventh Module 'The biggest bas ever made....1306 Subs and Functions '--If you make any programs with this please 'email them to me i would like to see them-- '--AND, If You Have Any Ideas For My Next Bas 'Or Suggestions, and Comments, or Errors Email Me-- '!-#* If you have a web site please post.....

'º¯`v´¯¯) PhrostByte By: Progee (¯¯`v´¯º '.·´¯`·- gøthíc nightmâres by másta ­·´¯`· '·._.-- aøl 4.o punt tools · loaded ---._.· '· úpr mácro stùdio · másta · '-=·Sting Anti Punta 2.o Loaded·=- '-=·MaDe By SaBrE·=- '(¯\_ GøDZîLLa³·º _/¯) '(¯\_ ßy ÇoLd _/¯) '¢º°¤÷®ÍP§ 2øøø÷¤°º¢ ' ¢º°¤÷£øÃdÊD÷¤°º¢ '-•(`(`·•Fate Zero v¹ Loaded•·´)´)•- '•·.·´).·÷•[ Outlaw Mass Mailer by Twiztid '(¯`·.····÷• ärméñïå¹ · kðkô '(¯`·.····÷• îøâdèd '•·._.·´¯`·>AoL 4.0 TooLz By:.....

The following is a summary of AOL’s “Kids Only Channel Policies.” The AAC is obligated to follow these policies at all times. (from “Document Version 2.32”). All items are direct quotes, commentary is in brackets. The original document is 16 pages long. Grammar and spelling are as found in the original document. This document was prepared bu AAC Coord based on policies in effect in July, 1998.

Introduction

AOL developed The the Kids Only Channel Policies (“Policies”) to ensure a uniform consistent set of standards and practices throughout all programming and advertising areas (Rainman or web-based) targeted to kids children 12 and under on America Online, and particularly including through the Kids Only channel. AOL reserves the right to modify these Policies as necessary. Additionally, AOL expects all Partners to abide by the Children’s Advertising Review Board Unit (“CARU”) guidelines for Interactive Electronic Media (see also http://www.bbb.org/advertising/caruguid.html)

Policy PrincipleObjectivesGoals
~Provide a safe, age appropriate environment for kids in a manner appealing to both kids and parents, addressing primary industry and consumer concerns:
~Providing age appropriate content
~Protecting youth privacy, including protection from online predators
~Creating an age-appropriate marketing environment.
~Create a viable programming and business model for youth-targeted areas and partners on AOL.
~Provide a safe, age appropriate environment for kids in a manner appealing to both kids and parents;
~Create a viable programming and business model for youth targeted channels and partners on AOL.


list assist is a password list tool. AolMacro.bas is for the people that make aol progs. JDE Productions: november 2002 list assist v2 has been pushed out early due to the release of xbox live & unreal championship. look forward to more options in list assist v3 when i get sick of playing unreal on xbox live. if you have xbox live my gametag is.....

How to use: Crash - crashes victim offline, One hit kills! (Will not work on aol or mac users) Works on aim 5.2+ A drive - spinds there a drive! A drive X10 - spins it 10 times, really annoying XD! Full - does all 3! Great fun!   Upcoming - version 3.0!

 

[Disclaimer]

 

–==LEET LINK AdvancedAccess Absolute Edition==–

This is FREE Software!

Author: c4rn3vil/NeophytesnVisualBasiX/Chris

Completed: September 24th – 2004

 

:—This MIGHT* work for DIALUP USERS – one of my buddies’ is using dialup and it worked for him, but however for the longterm extension …This DOES NOT work for DIALUP users!’

 

This is now fully equiped/ (coded internal with mstcp/ip+winsock/lan, data flows)

It runs now with a EVEN More sufficient encryption.

I’ve added a MP3 Player, [Tight]

I also Plugged in a ‘POPUP Blocker’ You’ll atleast need to have the screen open, ‘POPUP BLOCKER’ atleast.

You may minimize the pop up blocker. to leave the hastle of it getting infront of you.

This is the last Version of the LEET LINKS I’m doing!

I hope you enjoy this fine release by c4rn3vil/neophytesnvisualbasix/Chris.

 

 

 

Note: known error is that when you attempt to load proxies and you do not load them, it’ll call an arguement and program will fail, just reoping the program and do load the proxies, that’s what this program is for!

tweeCin by Negz [Read Me]

r0ckin that 2k3 Vallero Ent 760' 48 73 commands so far (tweeCin Ver2) Ver 3 Coming So0n ------------------------------------- ps. chatscan suckz so deal with it. ------------------------------------- ------------------------------------- «-Aol Commands-» adv* Advertise program aoluser? * Gets AOLuSer aim* connects to aim cmds* shows commands clear* Clears Chatroom dir* show directory list dl on* turns download Timer on dl off* turns download Timer off file* dl /.....

sup! thank you for using my newest ccom called def coms version two! this is probably one of the better ccoms out right now, it is errorless on my computer but may act differently on yours. if there are many bugs on the ccoms please email me at dj_bles@hotmail.com. these ccoms are adaptable for both aol 4 and 5. also, sometimes possibly a command can.....