Windows 8 In Depth

Live Phish: A Real-World Example

A typical phishing email tends to report that some activity has taken place in your account with a specific organization with which you’re affiliated: a password was changed, a deposit or withdrawal was made, money was transferred, a shipment was made, or an important message is waiting. The email requires that you click a web link to attend to the matter immediately, to confirm the activity, or to deny that you initiated it. Now, you’ll know right away it’s phony if you aren’t actually affiliated with the bank or company in question. But if you are affiliated, you might not know whether it’s a fraud, at least not right away. You have to look deeper.

Figure 34.1 shows an example of a rather sad attempt I found ...