It Ch. 6 Computer Fraud And Abuse Techniques

Front 1

Address Resolution Protocol spoofing

Back 1

Sending fake ARP mesages to an Ethernet LAN.

Front 2

Adware

Back 2

Software that collects and forwards data to advertising companies or causes banner ads to pop up as the internet is surfed.

Front 3

Bluebugging

Back 3

Taking control of a phone to make calls, send text messages , listen to calls, or read text messages.

Front 4

Bluesnarfing

Back 4

Stealing contact lists, images, and other data using Bluetooth.

Front 5

Botnet

Back 5

A network of hijacked computers.

Front 6

Zombies

Back 6

Bot herders use the hijacked computers, called _________.

Front 7

Buffer overflow attack

Back 7

Inputting so much data that the input buffer overflows. The overflow contains code that takes control of the computer.

Front 8

Caller ID spoofing

Back 8

Display an incorrect number on the recipient's callee ID display to hide the identity caller.

Front 9

Carding

Back 9

Verifying credit card validity; buying and selling stolen credit cards.

Front 10

Chipping

Back 10

Planting a chip that records transaction data in a legitimate credit card reader.

Front 11

Cross-site scripting (XXS) Attack

Back 11

Exploits Web page security vulnerabilities to bypass browser security mechanisms and create a malicious link that injects unwanted code into a website.

Front 12

Cyber Bullying

Back 12

Using computer technology to harm another person.

Front 13

Cyber-extortion

Back 13

Requiring a company to pay money to keep an extortionist from harming a computer or a person.

Front 14

Data diddling

Back 14

Changing data before, during, or after it is entered into the system.

Front 15

Data leakage

Back 15

Unauthorized copying of company data.

Front 16

Denial-of-service attack

Back 16

An attack designed to make vomputer resources unavailable to its users.

Front 17

Dictionary attack

Back 17

Using software to guess company addresses, send employees blank emails, and add unreturned messages to spammer email lists.

Front 18

DNS spoofing

Back 18

Sniffing the ID of a Domain Name System request and replying before the real DNS server.

Front 19

Eavesdropping

Back 19

listening to private voice or data transmissions.

Front 20

Economic espionage

Back 20

The theft of information, trade secrets, and intellectual property.

Front 21

E-mail threats

Back 21

Sending a threatening message asking recipients to do something that makes it possible to defraud them.

Front 22

E-mail spoofing

Back 22

Making a sender address and other parts of an email header appear as though the email originated from a different source.

Front 23

Evil twin

Back 23

A wireless network with the same name as another wireless access point.

Front 24

Hacking

Back 24

Unauthorized access, modification, or use of computer systems, usually by means of PC and communications network.

Front 25

Hijacking

Back 25

Gaining control of someone elses computer for illicit activities.

Front 26

IP address Spoofing

Back 26

Creating internet protocol packets with a forged IP address to hide the senders identity or to impersonate another computer system.

Front 27

Identity theft

Back 27

Assuming someones identity by illegally obtaining confidential information.

Front 28

Internet auction fraud

Back 28

Using an internet auction site to commit fraud.

Front 29

Internet misinformation

Back 29

Using the internet to spread false or misleading information.

Front 30

Internet terrorism

Back 30

Using the internet to disrupt communications and ecommerce

Front 31

Internet pump-and-dump fraud

Back 31

Using the internet to pump up the price of a stock and then sell it.

Front 32

Key logger

Back 32

Using spyware to record a users keystrokes.

Front 33

Lebanese looping

Back 33

Inserting a sleeve into an ATM so that it will not eject the victims card, pretending to help the victim as a means to discover his or her PIN, and then using the card PIN to drain the account.

Front 34

Logic bombs and time bombs

Back 34

Software that sits idle until a specified circumstance or time triggers it, destroying programs, data, or both.

Front 35

Malware

Back 35

Software that can be used to do harm.

Front 36

Man-in-the-Middle (MITM) attack

Back 36

A hacker placing himself between the client and a host to intercept network traffic

Hint 36

A.k.a. Session Hacking

Front 37

Masquerading / Impersonation

Back 37

Accessing a system by pretending to be an unauthorized user.

Front 38

Packet sniffing

Back 38

Inspecting information packets as they travel the internet and other networks.

Front 39

Password cracking

Back 39

Penetrating the system defenses, stealing passwords, and decrypting them to access system programs, files, and data.

Front 40

Pharming

Back 40

Redirecting traffic to a spoofed web site to obtain confidential information.

Front 41

Phishing

Back 41

Communications that request recipients to disclose confidential information by responding to an email or visiting a website.

Front 42

Phreaking

Back 42

Attacking phone systems to get free phone access.

Front 43

Piggybacking

Back 43

Clandestine use of someones WiFi network.

Front 44

Podslurping

Back 44

Using a small device with a storage capacity to download unauthorized data from a person.

Front 45

Posing

Back 45

Creating a seemingly legitimate business, collecting personal data while making a sale and never delivering items sold.

Front 46

Rootkit

Back 46

Software that conceals processes, files, network connections, and system data from the operating systems and other programs

Front 47

Pretexting

Back 47

Acting under false pretenses to gain confidential information.

Front 48

Round-down fraud

Back 48

Truncating interest calculations at two decimal places and placing truncated amounts in the perpetrators account.

Front 49

Ransomware

Back 49

Software that encrypts programs and data until a ransom is paid to remove it.

Front 50

Salami technique

Back 50

Stealing tiny slices of money over time.

Front 51

Scareware

Back 51

Malicious software of no benefit that is sold using scare tactics.

Front 52

Scavenger / Dumpster diving

Back 52

Searching for confidential information by searching for documents and records in garbage cans, communal trash bins and city dumps.

Front 53

Sexting

Back 53

Exchanging explicit text messages and pictures.

Front 54

Shoulder surfing

Back 54

Watching or listening to people enter or disclose confidential data.

Front 55

Skimming

Back 55

Double-swiping a credit card or covertly swiping it in a card reader that records the data for later use.

Front 56

SMS spoofing

Back 56

Using short message service to change the name or number a text message appears to come from.

Front 57

Social engineering

Back 57

Techniques that trick a person into disclosing confidential information.

Front 58

Software piracy

Back 58

Unauthorized copying or distribution of copyrighted software.

Front 59

Spamming

Back 59

Emailing an unsolicited message yo many people at the same time.

Front 60

Splog

Back 60

A spam blog that promotes web sites to increase their google page rank.

Front 61

Spyware

Back 61

Software that monitors computing habits and sends that data to someone else, often without the users permission.

Front 62

Spoofing

Back 62

Making electronic communications look like someone else sent it.

Front 63

SQL injection attack

Back 63

Inserting a malicious SQL query in input in such a way that it is passed to and executed by an application program.

Front 64

Steganography

Back 64

Hiding data from one file inside a host file, such as a large image or sound file.

Front 65

Superzapping

Back 65

Using special software to bypass system controls and perform illegal acts.

Front 66

Tabnapping

Back 66

Secretly changing an already open browser tab using Javascript.

Front 67

Trap door

Back 67

A back door into a system that bypass normal system controls.

Front 68

Trojan horse

Back 68

Unauthorized code in an authorized and properly functioning program.

Front 69

Typosquatting / URL hijacking

Back 69

Web sites with names similar to real web sites

Front 70

Virus

Back 70

Executable code that attaches itself to software, replicates itself, and spreads to other systems or files.

Front 71

Vishing

Back 71

In which email recipients are asked to call a phone number that asks them to divulge confidential data.

Front 72

War dialing

Back 72

Dialing phone lines to find idle modems to use to enter a system, capture the attached computer, and gain access to its networks.

Front 73

War driving /rocketing

Back 73

Looking for unprotected wireless networks using a car or rocket.

Front 74

Web cramming

Back 74

Developing a free and worthless trial version web site and charging the subscribers phone bill for months.

Front 75

Web-page spoofing

Back 75

Also called phishing

Front 76

Worm

Back 76

Similar to virus; a program rather than a code segment hidden in a host program.

Front 77

Zero-day attack

Back 77

Attack between the time a software vulnerability is discovered and a patch to fix the problem is released.