PERSONAL DATA

Phishing attacks use both social engineering and technical deceptions to steal personal identity data and financial account identification. Social engineering schemes use "spoofed" e-mails to lead consumers to fake websites designed to trick the addressee into revealing financial data, such as credit card numbers, account usernames, passwords, and social security numbers. Hijacking the names of banks, online retailers, and credit card companies, phishers often convince naive recipients to respond. Technical deception schemes plant worms and viruses onto PCs to steal identification directly, often using Trojan-delivered keylogger spyware. Pharming crimeware diverts users to counterfeit sites or proxy servers, characteristically from DNS hijacking or poisoning. Of course, one of the newest exploits used cryptographic techniques to take your data "hostage" and ransom it. Describe in details two of the exploits mentioned above. Describe the problem of identity theft and ways to help prevent it. Create a simple policy statement that covers all of theses threats.