[Term of the Day]: Spoofing

[Term of the Day]: Spoofing

Term of the Day 
 

Spoofing” 

 

Definition — What is Spoofing?


Spoofing is one of those tricks by which hackers can get access to the workstation/server of an organization and steal all the essential data, which can cause serious consequences to the organization. The hacker may harvest credentials for use in future attacks, spread malware through attachments, gain unauthorized network access by taking advantage of trust relationships. They may even launch a denial-of-service (DoS) attack or a man-in-the-middle (MITM) attack. In general, spoofing is the act of disguising a communication or identity so that it appears to be associated with a trusted, authorized source.


There are several different types of spoofing attacks devised by hackers, some of the most common methods include Caller id spoofing, Email spoofing, and Text messages spoofing. 

  • Email spoofing occurs when a hacker uses an email message to trick a recipient and make him/her think that the email came from an authorized and legitimate source. The email sent by the hacker can contain links that direct the user to a malicious website or there can be attachments that can contain malware. The end goal is to gain access to your personal information and get your password or any other personal information that could be a trick.
  • Caller ID spoofing, the scammer uses a phone app or a piece of hardware to forge caller ID information sent across a voice network. They make it appear as if their call is coming from a known number. The scammer often tries to persuade the victim to reveal personal information relating to username or passwords, account details, social security numbers, etc.
  • Text messaging spoofing uses a spoofed phone number to send malicious text messages. The text message may include a phone number for the recipient to call or a link to a malicious website or malware downloads.

It's always wise to learn about the kinds of spoofing attacks that are in use today as well as how to detect and prevent them.


                  New to ADSelfService Plus?