Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails (Paperback)

An essential anti-phishing desk reference for anyone with an email address

Phishing Dark Waters addresses the growing and continuing scourge of phishing emails, and provides actionable defensive techniques and tools to help you steer clear of malicious emails. Phishing is analyzed from the viewpoint of human decision-making and the impact of deliberate influence and manipulation on the recipient. With expert guidance, this book provides insight into the financial, corporate espionage, nation state, and identity theft goals of the attackers, and teaches you how to spot a spoofed e-mail or cloned website. Included are detailed examples of high profile breaches at Target, RSA, Coca Cola, and the AP, as well as an examination of sample scams including the Nigerian 419, financial themes, and post high-profile event attacks. Learn how to protect yourself and your organization using anti-phishing tools, and how to create your own phish to use as part of a security awareness program.

Phishing is a social engineering technique through email that deceives users into taking an action that is not in their best interest, but usually with the goal of disclosing information or installing malware on the victim's computer. Phishing Dark Waters explains the phishing process and techniques, and the defenses available to keep scammers at bay. * Learn what a phish is, and the deceptive ways they've been used * Understand decision-making, and the sneaky ways phishers reel you in * Recognize different types of phish, and know what to do when you catch one * Use phishing as part of your security awareness program for heightened protection

Attempts to deal with the growing number of phishing incidents include legislation, user training, public awareness, and technical security, but phishing still exploits the natural way humans respond to certain situations. Phishing Dark Waters is an indispensible guide to recognizing and blocking the phish, keeping you, your organization, and your finances safe.

《釣魚黑水》是一本針對釣魚郵件的必備反釣魚桌面參考書，適合任何擁有電子郵件地址的人。本書提供了可行的防禦技巧和工具，幫助您避免受到惡意郵件的侵害。書中從人類決策的角度分析了釣魚行為，以及對收件人的故意影響和操縱的影響。在專家的指導下，本書揭示了攻擊者在金融、企業間諜、國家安全和身份盜竊方面的目標，並教您如何辨識偽造的電子郵件或複製的網站。書中還詳細介紹了Target、RSA、可口可樂和AP等知名公司的重大違規事件，以及尼日利亞419詐騙、金融主題和高知名度事件後的攻擊等詐騙案例。學習如何使用反釣魚工具保護自己和組織，以及如何創建自己的釣魚郵件，作為安全意識計劃的一部分。《釣魚黑水》解釋了釣魚過程和技巧，以及可用的防禦措施，以防止騙子的侵害。了解什麼是釣魚郵件，以及它們被使用的欺騙手段。了解決策過程，以及騙子如何欺騙您。辨識不同類型的釣魚郵件，並知道在發現時應該怎麼做。將釣魚郵件納入您的安全意識計劃，以提高保護水平。針對日益增多的釣魚事件，人們已經嘗試通過立法、用戶培訓、公眾宣傳和技術安全等方式來應對，但釣魚行為仍然利用人類對特定情況的自然反應。《釣魚黑水》是一本不可或缺的指南，幫助您識別和阻止釣魚行為，保護您、您的組織和財務安全。