Please enable JavaScript.

Coggle requires JavaScript to display documents.

CHAPTER 6 - COMPUTER FRAUD AND ABUSE TECHNIQUES - Coggle Diagram

- - - - BOTNET- A network of powerful and dangerous hijacked computers that are used to attack systems or spread malware
        
        ZOMBIE - A hijacked computer typically that is used to launch a variety of internet attacks
        
        BOT HERDER - The person who creates a botnet by installing software on PCs that responds to the bot herder's electronic instructions
        
        DENIAL OF SERVICE (DoS) attack - A computer attack in which the attacker send so many e-mail bombs or web page requests
- - - - SPOOFING - Altering some part of an electronic communication to make it look as if someone sent the communication in order to gain the trust of the recipient
        
        E-MAIL SPOOFING- Making a sender address and other parts of an email header appear as though the email originated from a different source
        
        CALLER ID SPOOFING- Displaying an incorrect number on the recipients caller ID display to hide the caller's identity
        
        IP ADDRESS SPOOFING - Creating Internet Protocol packets with a forged IP address to hide the sender's identity or to impersonate another computer system
- - - - WEB-PAGE SPOOFING- See phishing
        
        DNS SPOOFING - Sniffing the ID of a Domain Name System (DNS, the "phone book" of the internet that converts a domain
        
        ZERO- DAY ATTACK- An attack between the time a new software vulnerability is discovered "released into the wild" and the time a software developer releases a patch to fix the problem
        
        PATCH - Code released by software developers that fixes a particular software vulnerability
        
        CROSE-SITE SCRIPTING (XSS) - A vulnerability in dynamic web pages that allows an attacker to bypass a browser's security mechanism and instruct the victim's browser to execute code
- - - - MASQUERADING / IMPERSONATION- Gaining access to a system by pretending to be an authorized user. This requires that the perpetrator know the legitimate user's ID and passwords
        
        PIGGYBACKING - (1)Tapping into a communicating line and electronically latching onto a legitimate user who unknowingly carries the perpetrator into the system.(2) The clandestine use of a neighbor's Wi-Fi network. (3) An unauthorized person following an authorized person through a secure door, bypassing physical security controls
        
        PASSWORD CRACKING - When an intruder penetrates a system's defenses, steals the file containing valid passwords, decrypts the, and uses them to gain access to programs, files and data
        
        WAR DIALING- Programming a computer to dial thousands of phone lines searching for dial-up modem lines. Hackers hack into the PC attached to the modem and access the network to which it is connect
        
        WAR DRIVING- Driving around looking for unprotected home or corporate wireless networks
        
        PHREAKING- Attacking phone systems to obtain free phone line access, use phone lines to transmit malware and to access
- - - - PODSLURPING - Using a small device with storage capacity (iPod, flash drive) to download unauthorized data from a computer
        
        SALAMI TECHNIQUE - Stealing tiny slices of money from many different accounts
        
        ROUND- DOWN - Instructing the computer to round down all the interest calculations to two decimal places. The fraction of a cent rounded down on each calculation is put into the programmes's acoount
        
        ECONOMIC ESPIONAGE - Theft of information, trade, trade secrets and intellectual property
        
        CYBER- EXTORTION- Threatening to harm a company or a person if a specified amount of money is not paid
        
        CYBER-BULLYING - Using computer technology to support deliberate, repeated and hostile behavior that torments, threatens, harasses humiliates, embarrasses or otherwise harms another person
        
        1 more item...
- - - - CARDING - Activities performed on stolen credit cards, including making a small online purchase to determine whether the card is still valid and buying and selling stolen credit card numbers
        
        PHARMING- Redirecting website traffic to a spoofed website
        
        EVIL TWIN- A wireless network with the same name (Service Set Identifier) as a legitimate wireless access point. Users are connected to the twin because it has a stronger wireless signal or the twin disrupts or disables the legitimate access point. Users are unware that they connect to the evil twin and the perpetrator monitors the traffic looking for confidential information
        
        TYPOSQUATTING/URL HIJACKING- Setting up similarly named websites so that users making typographical errors when entering a website name are sent to an invalid site
        
        QR BARCODE REPLACEMENTS - Fraudsters cover valid Quick Response codes with stickers containing a replacement QR code to fool people into going to an unintended site that infects their phones with malware
        
        TABNAPPING- Secretly changing an already open browser tab in order to capture user IDs and passwords when victim logs back into the site
        
        1 more item...
  - - - PHISHING- Sending an electronic message pretending to be a legitimate company, usually a financial institution and requesting information or verification of information and often warning of a consequence if it is not provided. The request is bogus and the information gathered is used to commit identify theft or to steal funds from the victim's account
- - - - PACKET SNIFFERS- Programs that capture data from information packets as they travel over the Internet or company networks. Captured data is sifted to find confidential or proprietary information
        
        STEGANOGRAPHY PROGRAM- A program that can merge confidential information with a seemingly harmless file, password protect the file, and send it anywhere in the world, where the file is unlocked and the confidential information is reassembled. The host file can still be heard or viewed because humans are not sensitive enough to pick up the slight decrease in image or sound quality
        
        ROOKIT- A means of concealing system components and malware from the operating system and other programs can also modify the operating system
  - - - WORM- Similar to a virus, expect that it is a program rather than a code segment hidden in a host program. A worm also copies itself automatically and actively transmits itself directly to other systems
        
        BLUESNARFING- Stealing (snarfing) contacts lists, image and other data using flaws in Bluetooth applications
        
        BLUEBUGGING- Taking control of someone else's phone to make or listen to calls, send or read text messaged, connect to the Internet, forward the victim's calls and call numbers that charge fees