online-banking

Spoofing

URL Spoofing involves a fraudulent web page masquerading as a legitimate one.

Spoofing is, generally, the act of one person pretending to be someone else, usually in an effort to scam someone or otherwise commit either fraudulent or fairly malicious acts. In the sense that it is used in security and fraud, a person imitates to appear – or spoofs – to be another person or service and gain sensitive information, or otherwise maintain an advantage over the unwitting victim.

Example: A hacker copies a website, email, cell phone or GPS location – exactly – and hides any differences, usually to subvert.

Defense: Users can be educated to watch for fake websites. Websites can be designed so it will be obvious to a user when they are not on the “real” website.

Examples:
Banks Hit With New Spoofing Attacks
Fraud Summit 2013: Banks’ Key Risks (Spoofing)
Phishers Spoof Bank’s Security Guidance Web Page