PHISHING (Online hmanga inbumna ngeiawm)

PHISHING (Online hmanga inbumna ngeiawm)
Er. Chhungpuia Renthlei
Senior Technical Officer, NIELIT Aizawl

Bank leh company atangin phone call leh SMS hmangin emergency taka Bank account leh KYC update tur te,loan offe leh Loterry i man thu te i dawng thin em? Social media, email, Mobile apps leh Website ah advertisement leh man tlawm tak taka thil zawrh te i hmu thin em? Carrier atangin i parcel tur  a rawn thlen thu leh i address kimchang  thawn turin an rawn ti che em? Software leh website thenkhat hmang turin registration / Signup kher turin an ti che em? Products man tlawm lutuk offer  i hmu thin em? Heibakah hian thil nihphung pangngai aia danglam deuh bik i hmu anih chuan inbumna chikhat "Phishing" a ni a, heng hmang te hian nitin mi sang tel an bum thin tih ilo hre dawn nia.  

Phishing chu enge ni?

A awmzia ber chu kan nihna(Personal Identity) leh Information pawimawh leh bank account te ruk sak theih nana awihawm leh itawm tak tak hmanga phone call, email, message leh advertisement hmanga inbumna a ni. Nitin hian website, social media leh SMS ah hetiang inbumna hi hmuh tur a tam hle.

Hetianga bumtu te hian companies leh government agencies anga insawiin tawkdarh hrang hrang phone call, email, message leh advertisement hmangin website, social media leh SMS ah an thawndarh a. A then te phei chu hmanhmawh thlak lutuk angin an nawr a. An bum te personal data leh financial information an hman ruk sak bakah an khawih chingpen sak a. Phalna lovin account an hman sak a, data pawimawh an neih te an thehdarh sak thin.

Phishing hmanga inbumna langsar zual eng te nge?
1. Spear Phishing:
Personal information (Personal Identity) hmanga mi naran leh hausa thlenga an bumna a ni. An bum te personal data leh financial information an hman ruk sak bakah an khawih chingpen sak a. Phalna lovin account an hman sak a, data pawimawh an neih te an thehdarh sak thin.

2. Whaling Attacks: 
An tum ber chu mi vantlang chunglam leh hausa data pawimawh leh pawisa ruksak a ni. An bum te sum tam tak ruksak a, data pawimawh an khawih chingpen sak bakah an mi bum te awmna pawl leh department an tihmualphosak thin.

3. Clone Phishing: 
eMail pawimawh tak ang chi anpui ang chiah an siam a, link leh attachement siam danglama, message an thawndarh thin.Message an hawn a, link leh attachment an hawn veleh Malware a inthehdarh a,data pawimawh an ruksak a,login credential (user id leh password) an ruk chhuahsak a, an khawih chingpen thin. email, Fb, IG, website e.t.c an hack sak thin.

4. Pharming:
Mi tam takin kan tlawh thin Website lar tak tak lem a tak ang chiahin an siama, an duhzawng tak thil engawm hmangin an khalh lut a. An mi bum te nihna(hming, photo leh address) kimchang, Pawisa Personal information an ru a, an duh duhin an hman ruksak thin.

6. Voice Phishing:
 
Awihawm thei ang ber turin inbum nana aw(Voice) tidanglamin phone call hmangin an bia a. An bum te Personal information inhrilh tir a, pawisa rukchhuah sak a, inbumna hrang hrangin an bum zui thin bawk.

7. SMS Phishing: 
An mi bum duh te tana itawm leh awihawm thei ang ber turin message an siam a.Message ah hian Personal information inhrilh ngei ngei na tur leh virus awmna file download tur an ruahman sa vek a. An mi bum te nihna(hming, photo leh address) kimchang leh Pawisa an ruksak bakah an phone camera, contact list, bluetooth e.t.c an hman ruk sak thei bawk.

Engtinnge Phishing hmangin an bum? 
Dan naranin phishing attack hi emails, social networks, leh text messages atangin a awm thin. Awihawm thei ang ber turin thu an phuah a, Fake Website( Website lem) luhna tur link leh virus awmna file download na tur link an dah tel bawk thin. Website kan tlawh emaw, file kan Download veleh kan systemah virus a darh vak thin. Tin, website ah hian form fill up tur an dah thin a, kan data fill up apiang kha an lo ru vek thin. A bik takin pawisa kaihhnawih online shopping ang chi ah phei chuan Bank account No, Credit card No leh information pawimawh an ru vek thin. Phishing hmanga awihawm leh zuala inbum nan leh phishing security paltlang nan technology changkang tak  Chatbots leh Artificial Intelligent (AI ) voice generators te pawh an hmang mek bawk. 

Engtinnge phishing attacks kan hriat theih ang?
Rinhlelh awm website address (URL http "s" awmlo), hriat ngailoh atanga greeting message, Personal information indilna ang chi heng - KYC, Bank a/c update, thil download e,aw, lei dawna registration tih ngai kher te leh abik takin pawisa dawn theihna ang tak ni tura bank acoount thawnna ang chi te hi phishing attack a ni thin. Tin, thil hmanhmawh thlak lutuk anga, bank leh company atanga personal information pe tura an rawn sawi te hi inbumna a ni. Bank hian customer te personal information an dil ngailo.

Engtinnge phishing attacks laka kan invenhim theih ang?
Hriat ngailoh hnenah personal information pek loh tur. A him leh him loh hre hmasa lova software download loh tur. A him a hriatchian sa software chauh hman te,regular taka update fo leh Security software pakhat tal hman a tha. Account statement akhat tawkin check fo la, multi-factor authentication nen account vawnghim tlat thin ang che.

A pawimawh ber chu kut hlei leh hawkdak lutuk loh hi a ni. Email leh Message hriatchian loh click leh file download te, online shopping Advertisement link click te, photo leh Games software download te hi a himlo hle bawk. Invenna software neih ringawt hi himna famkim a ni lo. Himna tak tak zawk chu keimahni fimkhurna hi a ni. Phishing hmanga bum inih loh nan leh internet him leh tangkai taka i hman theih nan i himna thuruk, Security ABC(Always Be Careful) hi ilo zawm tlat dawn nia. 


Post a Comment

0 Comments