Identity theft Fraud

Identity Theft Fraud

  1) Introduction to Identity Theft

  Identity theft is stealing someone’s identity and pretends to be them usually to gain access to the victim benefits. This can be financial, social or even worse criminal.

  2) Identity theft occurrence

   According to privacy trust group the following are the statistics:

ID theft is the fastest growing crime n US(FBI)

1 in 5 people has now been a victim of identity theft.(FTC,FBI,Fraud invest, & javlinBB)

Total number of victims is now over 50 million individuals. This mean that 1 in 5 people in the US is now a victim of ID theft.

2 years ago 1 in 8 people was a victim(FTC), today 1 in 5 – individuals who was have never been victims of ID theft may soon be a minority.

85+ million people were victims of identity theft by 2018.(FTC)

15.3 million Americans were victims of identity theft in 2018(Javlin/BBB)

The number of new victims annually over the past several years has been approximately 50 million.

The losses to victims have been, and continue to be, signature

Identity theft costs individuals business in money and product stolen, costs of recovery and fraud investigation, and opportunity costs.

      

3)Impact of Identity Theft Fraud

               *Financial Problems

                              An attacker may not just get access to the bank account and drain it off money, but also create a credit card and run up a bill, without your knowledge.

               *Credit issues

                             Once under financial duress, credit report also starts to suffer. The credit score goes down and then getting mortgages or losses become almost impossible.

               *Benefit losses

                              Stealing the identity gives the attacker to benefits that belong to victim, whether it’s related to its medical or other benefit.

               *Legal Problems

                              Given all these issues naturally there will be legal issues that a victim gets entangled in, getting maybe even arrested for crime they did not commit.

4)Types of identity theft

        *Stolen Wallet

                       A wallet by default carries all personal information related to a victim. Address, license, cards perhaps even photos of love ones; this is enough information for the attacker to gain access to victims life.  

        *Change of address

                       Attackers change the mailing address rerouting the mail to their own location. This sends all information into the wrong hands.

        *Mail Theft

                       As the name suggests, attackers steal mail right from the front door.

        *Online Shopping

                       Attackers may Duplicate online store fronts in order to steal and gain access to confidential information.

5)Dumpster

        Attackers or thieves search the dumpster for the documents that have been casually discarded to get access to information they need to commit fraud.

6)E-Mail Theft

        Attackers can hack into an email and either reroute the mail to themselves or worse close the account by changing the password. Any mail received during this blocked period is data for attacker.

7)Smashing

        Thieves send text massage to a mobile device that pretends to be a contact and then directs the victim to a dangerous website with the idea of stealing their identity.

8)Vishing

        Voice-calls to landlines or mobile phone are effective ways for attackers to get personal INFORMATION.

9) ATM Schemers/Hand-head skimmers

        Attackers swipe the credit card in middle of legitimate like paying bills.

10)Prevention Techniques

       According to US government site, which recognises identity theft frauds as a real and present danger, they have issued a checklist for preventing identity theft:

*Don’t carry your social security card in your checks. Only give out your SSN when absolutely necessary.

*Protect your PIN, Never write a PIN on paper or any other place.

*Watch out for “Shoulder surfers”. Use your free hands to shield the keypad when using pay or Using ATM.

*Pay attention to your billing cycle.

*Store your personal information on safe place at home and work place.

*Install firewall and virus detection software on your home computer.

*Check your credit report twice a year.

Some Best Anti virus :- 1. McAfee total Protection  2.Nortan Security Standard                                    
3.Quick heal antivirus pro  4.AVG Antivirus for mobile         

                                     

social engineering attacks

Introduction to social Engineering:-

·       What is Social Engineering?

Social Engineering refers to psychological manipulation of people into either performing action or giving out confidential information.

·       Pretexting is to create an individual scenario to engage a target victim wherein he would give out information or perform actions that would be unlikely in ordinary circumstances.

·       Diversion theft  In this type of attack, the social engineers trick a delivery or courier company into going to the wrong pickup or drop-off location, thus intercepting the transaction.

·       Phishing is a technique of obtaining private information using fraud. Typically, the phisher sends an e-mail that appears to gain confidential information.

·       IVR OR Phone Phishing uses a false interactive voice response(IVR) system to recreate copy of an IVR System.

·       Baiting is like a Trojan horse that uses physical media and depends in people’s curiosity, Using a CD ROM or Flash Drive the attacker leaves it around someplace it can be found by an unsuspecting person. Being curious the person will by default load it to check it. And by doing so install malware on his system.

·       Quid pro quo in this attacker pretend t be someone from IT and makes random calls asking if there are any issues, finally finding someone who needs help, the attacker gets them to type commands giving access to the hacker to launch his malware. 

Computer base Social engineering:-

·       Email attachments that can dupe a user into either opening or executing a malware.

·       Fake websites that look like the original site can be used to gain information that is confidential.

·       Pop-up windows that advertise expertise can be used to send malware to the user.

Social Networking sites – Impersonation Platform/Medium:-

            An individual can create an account “Impersonating”  or  pretending to be someone else on social media. This is common especially in the cases of celebrities or higher value organization.

Some Quick Tips to Remember:

Think before you click. Assailants utilize a feeling of criticalness to make you act first and think later in phishing assaults. When you get an exceptionally dire, high-weight message, make certain to pause for a minute to check if the source is dependable first. The most ideal path is to use another strategy for correspondence not the same as where the message is from - like messaging the individual to check whether they messaged you a pressing message or that was from an assailant. Should be sheltered than sorry!

Research the sources. Continuously be cautious about any spontaneous messages. Check the space connects to check whether they are genuine, and the individual sending you the email on the off chance that they are real individuals from the association. As a rule, a grammatical mistake/spelling blunder is obvious. Use a web search tool, go to the organization's site, check their telephone registry. These are on the whole basic, simple approach to abstain from getting satirize. Drifting your cursor on a connection before you really click on it will uncover the connection at the base, and is another approach to ensure you are being diverted to the right organization's site.

Email ridiculing is omnipresent. Programmers, spammers, and social specialists are out to get your data, and they are assuming control over control of individuals' records. When they obtain entrance, they will go after your contacts. Notwithstanding when the sender gives off an impression of being somebody you know about, it is still best practice to check with them on the off chance that you aren't expecting any email connections or records from them.

Try not to download records you don't have the foggiest idea. On the off chance that you (a) don't have the foggiest idea about the sender, (b) don't anticipate anything from the sender and (c) don't have the foggiest idea in the event that you should see the document they simply send you with "Earnest" on the email feature, it's protected not to open the message by any stretch of the imagination. You wipe out your hazard to be an insider danger thusly.

Five Ways to Protect Yourself:

     1.Erase any solicitation for individual data or passwords. No one ought to get in touch with you for your own data through email unsolicited. On the off chance that you get requested it, it's a trick.

    2.Reject demands for assistance or offers of assistance. Social specialists can and will either demand your assistance with data or offer to support you (i.e acting like technical support). In the event that you didn't demand any help from the sender, consider any solicitations or offers a trick. Do your own examination about the sender before focusing on sending them anything.

     3.Set your spam channels to high. Your email programming has spam channels. Check your settings, and set them to high to dodge dangerous messages flooding into your inbox. Simply make sure to check them occasionally as it is conceivable genuine messages could be caught there every now and then.

   4.Secure your gadgets. Introduce, keep up and update normally your enemy of infection programming, firewalls, and email channels. Set your programmed reports on the off chance that you can, and just access verified sites. Consider VPN.

     5.Continuously be aware of dangers. Twofold check, triple check any solicitation you get for the right data. Pay special mind to cybersecurity news to take quick activities in the event that you are influenced by an ongoing break. I prescribe buying in to two or three morning pamphlet to stay up with the latest with the most recent in InfoSec like Cyware or BetterCloud Monitor. In the event that you are a web recording individual, Decrypted by Bloomberg, DIY Cyber Guy and Reply All offer simple to process data and news that is very easy to use.

Sniffiing And spoofing

Sniffing

Concept:-

A sniffing is a program that monitor and studies network traffic. The job of the sniffer is to detect bottlenecks and problems. The other use of a sniffer is to capture data being transmitted on a network. A network outer reads packets of data passing through it, the task is to determine the destination. However, in the hacking world, a sniffer is used to study and analyses data that is being transmitted on a network that is not your own.

Working of Sniffing:-

A sniffer program works at the router layer with the agenda to capture traffic travelling to and from internet host site. If any Ethernet card is in promiscuous mode, the sniffing will access all communication packets being transmitted. The task of sniffer is to find out a wireless network that is open to attack or vulnerable to attack.    

Types of Sniffing:-

Active Sniffing:-

Sniffing in the switch is dynamic sniffing. A switch is a point to point organize gadget. The switch manages the progression of information between its ports by effectively observing the MAC address on each port, which encourages it pass information just to its expected target. So as to catch the traffic between target sniffers needs to effectively infuse traffic into the LAN to empower sniffing of the traffic. This should be possible in different ways.

Passive Sniffing:

This is the way toward sniffing through the center point. Any traffic that is going through the non-exchanged or unbridged system fragment can be seen by all machines on that portion. Sniffers work at the information connection layer of the system. Any information sent over the LAN is really sent to every single machine associated with the LAN. This is called inactive since sniffers set by the assailants latently trust that the information will be sent and catch them.

LAN Sniff – 

The sniffer assaults the inside LAN and outputs the whole IP accessing live has, open ports, server stock and so forth.. A port explicit weakness assaults occurs in LAN sniffing.

Convention Sniff –

 Based on the system convention utilized, the sniffer assaults happens. The diverse convention, for example, ICMP, UDP, Telnet, PPP, DNS and so forth or different conventions may be utilized.

ARP Sniff – 

ARP Poisoning assaults or bundle ridiculing assaults happen dependent on the information caught to make a guide of IP address and related MAC addresses.

TCP Session taking –

 TCP session taking is utilized to screen and gain traffic subtleties between the source and goal IP address. All subtleties, for example, port number, administration type, TCP succession numbers, information are stolen by the programmers.

Application level sniffing –

 Applications running on the server are assaulted to design an application explicit assault.

Web secret key sniffing – 

HTTP session made by clients are stolen by sniffers to get the client ID, secret phrase and other delicate.

 Tools For sniffing:-

Wireshark – Widely utilized system convention analyzer to screen system and bundle streams in the system. It is free and works in multi stages.

Tcpdump – It has less security chance, requires couple of asset as it were. In windows it keeps running as WinDump.

Dsniff – Used to sniff various conventions in UNIX and Linux frameworks just, to sniff and uncover passwords.

NetworkMiner – Makes arrange examination basic, to recognize host and open ports through bundle sniffing. It can work disconnected.

Kismet – Specifically used to sniff in remote systems, even from concealed systems and SSIDs. KisMac is utilized for MAC and OSX condition.

Cain & able:- Cain & able is a password recovery tool for Microsoft operating system. T allows recovery of various kinds of passwords by sniffing the network, cracking encrypted password using Dictionary,Brute-Force and Cryptanalysis attacks.

Bundle Sniffing Attack Prevention

Bundle analyzers are utilized to screen, catch, and translate information parcels as they are transmitted crosswise over systems. Bundle analyzers can be PC programs (programming) or equipment. Basic elective names for parcel analyzers incorporate bundle sniffers, convention analyzers, and system analyzers. The terms remote sniffer and Ethernet sniffer are likewise utilized, contingent upon the kind of system.

Bundle sniffers have a wide scope of employments in hierarchical IT settings. IT groups use bundle analyzers to screen and channel system traffic. System analyzers are likewise significant instruments for testing conventions, diagnosing system issues, distinguishing arrangement issues, and settling system bottlenecks. At last, data security groups depend on these devices to find system abuse, vulnerabilities, malware, and assault endeavors.

Bundle Sniffer Attacks

Sadly, the capacities of system analyzers make them prevalent devices for noxious on-screen characters also. Convention analyzer assaults commonly include a vindictive gathering utilizing a system sniffer in indiscriminate mode. A sniffer in unbridled mode is fit for perusing all information streaming into and out of a passage on the system. Aggressors misuse parcel sniffers to take decoded data, keep an eye on system traffic, and assemble data to use in future assaults against the system. Convention analyzer assaults generally target client logins, money related data, and messages. Interfacing with shaky systems, for example, open or free Wi-Fi puts clients at a higher hazard for parcel analyzer assaults, as they are simpler for aggressors to sniff.

Notwithstanding just sniffing information, convention analyzers are regularly utilized by aggressors to execute increasingly complex assaults. Mocking assaults: Packet analyzers can be utilized to assemble data about the clients and gadgets associated with a system that an assailant means to parody.

Session sidejacking:

In this sort of assault, bundle sniffers are utilized to take session treats so as to mimic different clients.

Man-in-the-center assaults:

Attackers can utilize organize analyzers to block messages between two gatherings and after that produce messages from gathering to party.

Averting Packet Sniffer Attacks

There are a couple of steps that all ventures should take to guarantee that they are shielded from assaults that use convention analyzers. First off, secure conventions ought to be utilized at whatever point conceivable to guarantee that information is scrambled before being transmitted over a system. Instances of secure conventions incorporate HTTPS, Secure File Transfer Protocol (SFTP), and Secure Shell (SSH). In the event that a shaky convention must be utilized, the association can in any case shield its system from parcel sniffer assaults by utilizing encryption programming before transmitting information.

Notwithstanding utilizing secure conventions and scrambling information, associations ought to upgrade their system structure to safeguard against assaults that utilization organize analyzers. It is prescribed that systems are worked with switch innovation (as opposed to center point innovation) at whatever point conceivable. Subsequent to getting a message, a switch will transmit that message just to its planned beneficiary, while a center point transmits the messages it gets over the whole system. This element makes switches inalienably more secure than centers, especially for anticipating parcel analyzer assaults.

Another solid choice for averting parcel sniffer assaults is using remote registering innovation to guarantee that all information is encoded before being transmitted over a system. This technique is particularly viable in forestalling remote sniffers. VPN (Virtual Private Network), VNC (Virtual Network Computing) Protocol, and RDP (Remote Desktop Protocol) are basic instances of projects that give scrambled remote figuring. Utilizing a remote processing program in mix with the techniques examined above will support organize security by including different layers of encryption.

At long last, an association hoping to secure itself against convention analyzer assaults ought to consistently sniff its own systems utilizing remote sniffer programming. Doing as such enables the association to see its system from an aggressor's point of view so as to find sniffing assault vulnerabilities and assaults in advancement.

Tools for Detecting Malicious Packet Sniffers

Bundle analyzer programming as often as possible incorporates apparatuses for distinguishing interruption endeavors and concealed systems. Notwithstanding inherent utilities, there are numerous monetarily accessible advancements intended to recognize noxious convention analyzers. These devices normally work by checking system traffic and filtering for system cards in indiscriminate mode. There are a bunch of projects accessible that do this, so it is up to security groups to decide the best programming for their needs.

Spoofing

Spoofing Attack:-

Spoofing attack is a situation in which a program successfully pretends to be another by falsifying data and gains an illegitimate advantage.

IP spoofing:-

IP spoofing is making of internet protocol (IP) packets with a forged source IP address, with the idea of  hadean the identity of the sender or impersonating a computing system.

MAC spoofing:-

MAC Spoofing is the technique for changing a factory assigned media access control address of a network on a device. There are tools which can make an operating system believe that the router has the mac address of a user’s choosing. The process of masking a MAC address is known as MAC spoofing.

MAC Spoofing Impact:-

Since it is does not involve any data encryption, MAC has no packet overhead and has no impact on traffic.

MAC Spoofing tools:-

-Technitium MAC addresss Changer.


In Next Blog we learn about Social Engineering...!

    

     

Types of SQL Injecton and tools

Types of  SQL Injection

SQL Injection can be utilized in a scope of approaches to cause major issues. By turning SQL Injection, an aggressor could sidestep validation, get to, alter and erase information inside a database. At times, SQL Injection can even be utilized to execute directions on the working framework, possibly enabling an aggressor to heighten to all the more harming assaults within a system that sits behind a firewall.

SQL Injection can be characterized into three noteworthy classes – In-band SQLi, Inferential SQLi and Out-of-band SQLi.

In-band SQLi (Classic SQLi):-

In-band SQL Injection is the most widely recognized and simple to-endeavor of SQL Injection assaults. In-band SQL Injection happens when an aggressor can utilize a similar correspondence channel to both dispatch the assault and accumulate results.

The two most basic kinds of in-band SQL Injection are Error-based SQLi and Union-based SQLi.

Mistake based SQLi:-

Mistake based SQLi is an in-band SQL Injection system that depends on blunder messages tossed by the database server to acquire data about the structure of the database. Now and again, blunder based SQL infusion alone is sufficient for an aggressor to identify a whole database. While mistakes are helpful during the advancement period of a web application, they ought to be incapacitated on a live website, or logged to a record with limited access.

Association based SQLi:-

Association based SQLi is an in-band SQL infusion method that use the UNION SQL administrator to consolidate the consequences of at least two SELECT explanations into a solitary outcome which is then returned as a major aspect of the HTTP reaction.

Inferential SQLi (Blind SQLi):-

Inferential SQL Injection, dissimilar to in-band SQLi, may take more time for an aggressor to abuse, be that as it may, it is similarly as perilous as some other type of SQL Injection. In an inferential SQLi assault, no information is really exchanged by means of the web application and the assailant would not have the option to see the consequence of an assault in-band (which is the reason such assaults are regularly alluded to as "visually impaired SQL Injection assaults"). Rather, an assailant can remake the database structure by sending payloads, watching the web application's reaction and the subsequent conduct of the database server.

The two sorts of inferential SQL Injection are Blind-boolean-based SQLi and Blind-time sensitive SQLi.

Boolean-based (content-based) Blind SQLi:-

Boolean-based SQL Injection is an inferential SQL Injection strategy that depends on sending a SQL question to the database which powers the application to restore an alternate outcome relying upon whether the inquiry restores a TRUE or FALSE outcome.

Contingent upon the outcome, the substance inside the HTTP reaction will change, or continue as before. This enables an assailant to induce if the payload utilized returned genuine or false, despite the fact that no information from the database is returned. This assault is normally moderate (particularly on enormous databases) since an aggressor would need to count a database, character by character.

Time sensitive Blind SQLi :-

Time sensitive SQL Injection is an inferential SQL Injection method that depends on sending a SQL question to the database which powers the database to hang tight for a predefined measure of time (in a moment or two) preceding reacting. The reaction time will demonstrate to the assailant whether the consequence of the question is TRUE or FALSE.

Contingent upon the outcome, a HTTP reaction will be come back with a postponement, or returned right away. This enables an aggressor to surmise if the payload utilized returned genuine or false, despite the fact that no information from the database is returned. This assault is normally moderate (particularly on huge databases) since an aggressor would need to specify a database character by character.

Out-of-band SQLi :-

Out-of-band SQL Injection isn't exceptionally normal, for the most part since it relies upon highlights being empowered on the database server being utilized by the web application. Out-of-band SQL Injection happens when an aggressor is unfit to utilize a similar channel to dispatch the assault and accumulate results.

Out-of-band strategies, offer an assailant an option in contrast to inferential time sensitive procedures, particularly if the server reactions are not truly steady (making an inferential time sensitive assault inconsistent).

Out-of-band SQLi methods would depend on the database server's capacity to make DNS or HTTP solicitations to convey information to an aggressor. Such is the situation with Microsoft SQL Server's xp_dirtree order, which can be utilized to make DNS solicitations to a server an aggressor controls; just as Oracle Database's UTL_HTTP bundle, which can be utilized to send HTTP demands from SQL and PL/SQL to a server an assailant controls.

Tools for SQL Injection:-

• SQLMap - Automatic SQL Injection And Database Takeover Tool
• iSQl Injection – Java tool for automatic SQL Database injection
• BBQSQL – A Blind SQL Injection Exploitation tool 
• NoSQLMap – Automated NoSQL Database Pwnage
• Marathon Tool
• BSQL Hacker

"In Next blog we learn about  CROSS SITE SCRIPTING""Thank You...😊"