Studying ” ethical hacking has given me an upper hand on the hackers.” Hackers are people who learn stuff on their own. But we on the other hand are taught how to use stuff for saftey purposes.
One of our tools are security companies like RSA Anti-Fraud Command Center. Hackers basically inject their script code and upload it on FREE SCRIPT WEBSITES. Most developers are unaware of that fact and to save their time they download such scripts and upload it to their website. These script create automatic login pages that redirect to other websites. These are called Fraud Pages.
These pages should be reported immediately to RSA Anti-Fraud Command Center. What they do is they send an email just like below :
”
Dear Team
It appears that your website ******.com has been hacked by a fraudster. It is now hosting a phishing attack against RBC.
Please remove the fraudulent folders/files as soon as possible and secure your website as it has been compromised.
Please note that it is possible that the fraudulent content is embedded in your website’s legitimate files.
http://www.*****.com/sites/Library_/redirect.php
In addition, please send us any source files of the attack.
Please let us know if you have any questions or need further assistance. We appreciate your cooperation.
Best Regards,
RSA Anti-Fraud Command Center
RSA, The Security Division of EMC
US Phone: +1-866-408-7525
Email: afcc@rsa.com
For more information about RSA’s AFCC
http://www.rsa.com/node.aspx?id=3348
“
to the concerned authority and tell them to remove it. This is a very good way since they allow the developer to correct his mistake and be careful for next time.
You can see the contact information in their email and whenever you come across any such illegal page.
Just report it !!
Help us keep web clean and safe for upcoming generation !!
Note : This blog was written by a friend.
http://qambarraza.com/certified-ethical-hacking-ceh/what-is-a-fraud-page-or-phishing-site.html