Managing Mission - Critical Domains and DNS

Phishing

Phishing is the practice of setting up a blatantly fake website (or sending a forged email) purporting to be somebody else in the hopes of tricking end users into logging into the fake website, thus capturing their authentication credentials.

This is a multi-faceted attack with many vectors because there are multiple objectives for attackers and there may be some overlap when it comes to the following:

• Capturing authentication credentials to access the information and resources of the target.
• Gaining a base of operations from which to launch further attacks.
• Facilitating identity theft.
• Purchasing services to be used in ongoing operations of the attackers.
• Ordering goods to be fenced offline.

In the case of financial phishing (banks, ...