In TWO lines, how does 'phishing' start?
Sorry but it is difficult to answer this question in two lines. Phishing is the illegal act of obtaining sensitive information through fraudulent means. This is started by criminals who are computer savvy. They are able to set up emails and websites that look reputable. When you respond to the emails or go to these websites they ask you for sensitive information. If you give them the information they use it illegally. Social networking sites are being used as phishing sites because of the wealth of personal information that is available within them. Many of the phishing schemes are coming out of Russia. Not all phishing occurs over the internet. Some incidents shave occured using phone lines. A message is left for someone and asks the individual to call a number. When this number is called, personal information is requested. People feel comfortable leaving personal information because the site appears to be credible.
Phishing starts when a scammer programs one email that appears legitimate and filters it through a database belonging to a company that IS legitimate.
When the people in the database click on it, the phisher can get access to the passwords and other information of the email owner.