One of the most important elements of fishing is choosing the right lure or bait. The same is true when it comes to the malicious digital version—phishing. A phishing attack requires good bait to be effective. Organizations can defend against phishing attacks and help protect customers by using EV certificates to verify the authenticity of the website.

Recent Posts By Tony Bradley

• 
  Speed Rules in Chef’s DevOps Survey
  




• 
  A Matter of Trust: Survey Examines Impact of EV Certificates
  




• 
  Survey Finds EV Certificates Impact User Confidence, Revenue
  

More from Tony Bradley

Related Posts

• 
  A Matter of Trust: Survey Examines Impact of EV Certificates
  


• 
  Can EV Certificates Improve Brand Value and Increase Trust?
  


• 
  Survey Finds EV Certificates Impact User Confidence, Revenue
  

Related Categories


• 
  Blogs
  





• 
  DevSecOps
  

Related Topics



• 
  EV certificates
  





• 
  phishing
  





• 
  security
  





• 
  spoofing
  





• 
  websites
  

Show more

Show less

Phishing Attack Targets

Phishing attacks are designed to fool a victim into believing the phisher is a specific, trusted party for the purpose of stealing credentials, accessing sensitive data or propagating malware. The foundation of phishing depends on the ability to create a false identity that the target audience will believe is the real thing.

The most common targets for phishing attacks are online businesses—specifically, online businesses where customers generally conduct financial transactions or share sensitive data. Businesses of all sizes from small “mom and pop” shops to large enterprises are viable targets for phishing. Businesses in pretty much every industry are potential targets for phishing attacks, but the most high-profile phishing attacks typically focus on banks, credit unions, investment websites, ecommerce retailers and other similar businesses.

Creating a Credible Counterfeit

Due to the way the web is designed and the nature of HTML code, it is trivially easy to counterfeit a website. A simple “screen scrape” is all that’s required most of the time. You can right-click and save most images, or just link to the original images and code from the site being spoofed.

Voilà! The content inside the browser’s display window for a counterfeit phishing site can—and usually does—look identical to the content on the actual site. It actually helps maintain the façade of authenticity to leave legitimate links on the counterfeit site as well and only changing or redirecting a couple key elements.

Avoiding Phishing with EV Certificates

That’s where an EV certificate comes in handy. The attacker can scrape, download, stream or link to most—if not all—of the elements that are within the confines of the HTML window. However, there is no way for the attacker to re-create or spoof the green address bar of a website with an EV certificate. Because the EV certificate indicator is outside of the HTML window in the browser interface itself, it can’t be spoofed or counterfeited.

Websites that have an EV certificate give users a clear and simple way to determine if the website is legitimate or a counterfeit. It’s a good idea for organizations to give customers the tools they need to recognize and avoid a phishing attack. In the absence of an EV certificate, people don’t have that same opportunity.

Maximize the Value of the EV Certificate

Aside from helping customers steer clear of spoofed sites and phishing attacks, a recent survey highlights the fact that people have more confidence and trust in websites that are validated with an EV certificate. To get the most value out of the investment in an EV certificate, though—and ensure that users benefit from it as well—you need to follow a few simple tips:

 
• Use green address bars consistently on all customer-facing pages on the site.
 
• For companies operating with multiple brand names, use the brand names on certificates that match the brands of those sites.
 
• Proactively communicate to customers that your site has green address bars and what to look for (including images of what to expect in popular browsers) 
   
  • Include this message on appropriate portions of the website.
   
  • Include this message in outbound communications such as newsletters and security bulletins.
   
   
 

By communicating with customers what to expect when they visit your websites and what to look for to verify that the website is legitimate, and then universally using EV certificates that are consistent with the brand of the website for all public-facing sites, you can help customers recognize and avoid spoofed versions of your website(s).

Featured eBook

Comcast Business Strategy Hinges on DevOps

They say enterprise IT organizations can’t be as agile as web startups. All the legacy applications and systems in place create too much organizational resistance to change. As one of the largest providers of media and internet services with a history going back to 1963, Comcast would beg to differ. Comcast ... Read More

#pt-cv-view-940bab2omw .pt-cv-content-item padding-left: 3px !important;
#pt-cv-view-940bab2omw margin-left: 3px !important;
#pt-cv-view-940bab2omw .pt-cv-pinmas padding-left: 3px !important;
#pt-cv-view-940bab2omw.pt-cv-post-border margin: 0; border-top-style: solid; border-left-style: solid
#pt-cv-view-940bab2omw.pt-cv-post-border .pt-cv-content-item border-right-style: solid; border-bottom-style: solid;
#pt-cv-view-940bab2omw .pt-cv-title a, #pt-cv-view-940bab2omw .panel-title font-weight: 600 !important;
#pt-cv-view-940bab2omw .pt-cv-hover-wrapper::before background-color: rgba(0,0,0,.3) !important;
#pt-cv-view-940bab2omw .pt-cv-content-item:hover .pt-cv-hover-wrapper::before background-color: rgba(51,51,51,.6) !important;
#pt-cv-view-940bab2omw:not(.pt-cv-nohover) .pt-cv-mask * color: #fff;
#pt-cv-view-940bab2omw .pt-cv-carousel-caption background-color: rgba(51,51,51,.6) !important;
#pt-cv-view-940bab2omw .pt-cv-specialp * color: #fff !important; background-color: #CC3333 !important;
#pt-cv-view-940bab2omw .pt-cv-pficon color: #bbb !important;
#pt-cv-view-940bab2omw .pt-cv-custom-fields * font-weight: 600 !important;
#pt-cv-view-940bab2omw .add_to_cart_button, #pt-cv-view-940bab2omw .add_to_cart_button * color: #ffffff !important; background-color: #00aeef !important;
#pt-cv-view-940bab2omw .woocommerce-onsale color: #ffffff !important; background-color: #ff5a5f !important;
#pt-cv-view-940bab2omw .pt-cv-readmore:hover color: #ffffff !important; background-color: #00aeef !important;
#pt-cv-view-940bab2omw + .pt-cv-pagination-wrapper .pt-cv-more , #pt-cv-view-940bab2omw + .pt-cv-pagination-wrapper .pagination .active a color: #ffffff !important; background-color: #00aeef !important;
[id^='pt-cv-filter-bar-940bab2omw'] .active.pt-cv-filter-option, [id^='pt-cv-filter-bar-940bab2omw'] .active .pt-cv-filter-option, [id^='pt-cv-filter-bar-940bab2omw'] .selected.pt-cv-filter-option, [id^='pt-cv-filter-bar-940bab2omw'] .dropdown-toggle color: #fff !important; background-color: #00aeef !important;
[id^='pt-cv-filter-bar-940bab2omw'] .pt-cv-filter-title color: #fff !important; background-color: #00aeef !important;
#pt-cv-gls-940bab2omw li a font-weight: 600 !important;
#pt-cv-gls-940bab2omw li a.pt-active color: #fff !important; background-color: #ff5a5f !important;
#pt-cv-view-940bab2omw .pt-cv-gls-header background-color: #00aeef !important;