Phishing

A typical phishing fraud involves receiving an official looking e-mail supposedly from a bank asking for information to PREVENT fraud.

The link may appear to go to the real site, and the e-mail may appear to have come from a genuine source. The e-mail could have the genuine logo and style of the real organisations. The example here is an actual spoof e-mail, only the company identification has changed to our ficticious bank.

In this example, without S.O.L.I.D. Authentication® protection, if you click on the link two things happen to fool you.

  1. First the genuine home page of the bank opens
  2. A further window opens requesting your login details

There are some pretty elaborate methods deployed to fool you into parting with sensitive login details and they are changing on a daily basis but with S.O.L.I.D. Authentication® and our security 'at-a-glance' philosophy, you can be sure that the website asking for your login details is a legitimate one if you see their logo in the S.O.L.I.D. Authentication® window.

 

 

The log in screen could look identical to the genuine one but with S.O.L.I.D. Authentication® you won't get that far. S.O.L.I.D. Authentication® protects you by showing the RED Extreme Caution, and a RED box on the screen that you have to acknowledge, but most importantly, it blocks the fake site downloading, helping prevent the spread of malware. The Red box shown here not only warns you that you have attempted to reach a fake site, but offers to take you to the genuine site. It doesn't take you there automatically as it is important you know that you almost reached a fake site so you don't use the same route again. Suppose you had saved the fake link to your favourites, for example?

Fraudsters are very sophisticated and can produce web pages that are identical in every detail to a genuine site, with all the links going to the right places, except for the link to log-in, where your details are captured fraudulently. So it could be very difficult to spot.

Further frauds involve overlaying the https:// link in the address bar. The https is often given as something to check to confirm a site is genuine. This does not mean the site is safe, only that the traffic is encrypted. When https encryption can be bought for less than $5 a month it will not deter criminals.This does not of course fool S.O.L.I.D. Authentication®.

The consumer finds it increasingly difficult to distinguish between good and bad. S.O.L.I.D. Authentication® does not have this problem.

The S.O.L.I.D. Authentication® solution gives the reassurance of the logo of real sites and the clear indication of fraudulent sites. Otherwise it can be almost impossible to know which is real and which is not.