Original subtitles

Search counter-measure it's also about learning.

But in a different way on the previous counter-measure which was one against the stage fright where

Zilin represent a male where so you just click on the link you can install a payload on your device

that allows someone to connect your device and have full access.

Now there is only one side effect of that or there is only one weakness is that which is if you have

a good anti-virus and you click on this link which was a previous link if you click on a link that has

a payload or allowed to download the payload or open a web site that has a payload that anti-virus may

maybe detected.

Well the second type of malicious link is a link that steals your credentials.

You click on the link it will open a page maybe a male or a female or pay bell or any of that page set

request credential and ask you to enter your credentials.

And once you write them down it will be sent to someone.

Now the problem with this attack is that it cannot be

detected but by any antivirus or any security mechanism because what happened is you are connecting

to a server that has a fake page and you are just writing down the username and password.

So Actually nothing has been installed on your computer and currently the information will be our username

and password will be sent to a hacker or some malicious user.

Now usually people who's doing that put some kind of pressure.

I mean he will not send you a link and then you click on this link and log in but he will send this

kind of image that your account has been suspended because of too many wrong them.

Or you know recently we have been getting this e-mail from Hotmail that you are exceeding the storage

log to.

Otherwise we will block your account they will put some kind of pressure that will convince you to keep

canceling and puts username and password and log in.

So any kind of thing because eventually you may need to click on something.

What if you receive an e-mail from your company and surveil e-mail and it has an ink for a web site.

So you have to be careful to have an anti-virus and if any link request for authentication or a request

for username and password you should never log in using because no bank or no company or none of organization

will never request to enter a username and password truthtelling.

So it's a different time kind of attack maybe it's easier or simplified than the previous one it just

capturing the username and password.

But it should capture them a password but it should be prevented because it will not be detected.

So if you think you are safe because you bought an anti-virus and you install it on your mobile No you

may you may be a victim for such attack.

Another consideration or another countermeasures that you can use any website that has to scintillation

factor like Facebook or like Twitter where once you logon you have to you'll receive a code on your

cell phone or smartphone and you have to write the code as well.

You should use such technique because actually this will eliminate this kind of attack.

So even if this was a fake link that leads you to a fake Facebook face book page once you click on it

and you put username and password.

If this is a fake page no problem because what happened is the malicious hacker would need the codes

that you will be receiving on your mobile.

So any website or any service that has multiple syndication you should utilize that.