Countermeasures
Version 6
Module XIII
Hacking Email Accounts
News
Source: http://uk.news.yahoo.com/
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Module Objective
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Module Flow
EC-Council
Security Techniques
Vulnerabilities
Tools
Sign-in Seal
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Introduction
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Introduction
H ki email
Hacking
il accounts
t has
h become
b
a serious
i
th
threatt
Email accounts are the repositories where people store their private
information or even their business data
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Stealing Cookies
Social Engineering
Password
Phishing
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Stealing Cookies
If a web site uses a cookie, or a browser contains the
cookie, then every time you visit that website, the
browser transfers the cookie to that website
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Social Engineering
Social engineering is defined as a non
non-technical
technical kind of intrusion
that relies heavily on human interaction and often involves
tricking other people to break normal security procedures.
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Password Phishing
The process of tricking user to disclose user name and password by
sending
di ffake
k emails
il or setting
i up ffake
k website
b i which
hi h mimics
i i sign-in
i i
pages is called phishing
After gaining Username and password, fraudsters can use personal
information to:
Commit identity theft
Charge your credit card
Clear your bank account
Change the previous password
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
News
Source: http://www.consumeraffairs.com/
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Vulnerabilities
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Intercepted
p
emails are forwarded to a
pre-specified email address
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Eudora
The Bat!
B k
Becky
IncrediMail
Gmail Notifier
Group Mail Free
PocoMail
Forte Agent
Mail.Ru Agent
Scribe
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Mail Password emulates a POP3 server and the E-mail client returns
the password
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Quickly
Q
i kl and
d automatically
i ll search
h and
d spider
id ffrom
search engine to find e-mail addresses
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Supports
pp
all versions of MSN Messenger
g
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Features:
Decodes the coded user and owner password which provides the
standard security to prevent PDF files from copying, printing, and
editing
It reveals the Yahoo, Hotmail, Gmail, Indiatimes, Rediffmail, and
MSN accountt passwords
d
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
MegaHackerZ
MegaHackerZ helps you crack passwords to any email address
It will help you to get the password you desire, instantly
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Hack Passwords
The Email Password hacking software will get you any Password you
need
eed
It allows to take command and control of any email
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
S
Securing
i E
Email
il A
Accounts
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Sign-in Seal
Sign in seal protects account from
Sign-in
phishing
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Tool: EmailSanitizer
EmailSanitizer is a filter between the incoming email server, and your
computer
EmailSanitizer Lets you keep track of how much spam is being
stopped and how many viruses are being destroyed
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Tool: SuperSecret
SuperSecret provides secure storage for all of your logins and
passwords
d so th
thatt you only
l h
have one password
d tto remember
b
from now on
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
SuperSecret: Screenshot
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Summary
Username and password can be revealed if it is stored in cookie and is
not encrypted
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
EC-Council
Copyright by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited