Wed Jul 18, 2007 9:00AM EDT
See Comments (313)
Time to sharpen your number 2 pencils and put on your thinking caps. I've got a quiz for you. McAfee, creator of SiteAdvisor, is testing your knowledge of phishing sites—sites that attempt to steal your personal information by impersonating bona fide web sites. (Please note that heavy traffic to this site may affect its performance, so if you aren't able to access it, try again later.)
The 10-question quiz presents two side-by-side views of pages from MySpace, PayPal, Amazon, AOL, and others. One is real, the other is a fraud. Your mission, should you decide to accept it, is to spot the fake. I consider myself pretty good at spotting a fraud or scam, and I scored 8 out 10. Not bad, but it only takes one phishing site to leave you feeling violated.
![]()
I'll get you started. Here are two screenshots of MySpace. Which one is real? (Hint: The non-authentic site tries to trick users by giving them an authentic looking, but not quite right domain name.) Clueless? Check out the answer at SiteAdvisor. Some of the other phishing sites in the test use incomplete words, poor grammar, and inconsistent capitalization. In other words, the better you are at copyediting, the better you are at spotting the fake.
According to the Gartner Group, an industry analyst, the number of U.S. adults who received a phishing email almost doubled in just two years (from 57 million in 2004 to 109 million in 2006). The per-victim loss during that period spiked almost five-fold, from $257 to $1,244. Whether you're being scammed through ignorance or arrogance, the results are the same, according to McAfee.
Let me know how well you fare on the test. Share the test with your kids, your parents, your relatives, and friends—it's a logic/puzzle solving way to learn the difference between a phishing site and the real McCoy.
Join in the discussion. Here you'll see the comments in the order they were posted.
Check the digital certificate. File Properties Certificates. The certificate uses RSA encryption using public and private keys. There is a chain of trust using a root certificate supplied by your operating system. Google or Wikipedia if you need to know more. Do not log in to a site without checking the certificate first. I canceled a Chase Visa because the log in page doesn't have a certificate. Successive pages did. They send the password using https but neglect to identify themselves on the login page. Look at www.scottrade.com logijn page. It has a certificate. If you have more than one account and log out of one, before logging into the other account check the certificate. I once had a non-certificate page pop up and avoiding revealing my password because I checked the certificate.
psh i got 5/10. yepp thats right...
I think the font size needs to be bigger. When I clicked on the enlarge icon, you still couldn't read what is on the screen except for the bigger font. Interesting, though!
This website sucks. For 4 to 5 days, I've been trying to take the "phishing" quiz, and it has never become available.
I found the quiz very informative and got 7 out of 10. Thank you!
9/10. Was perfect until the last question.
yay i got 10
Please enable your browser's cookies to activate the My Tech column.
| Computers | Home Office | Wi-Fi & Networking | Phones & PDAs | Cameras & Camcorders | TV & Home Theater | Portable Audio |
|---|---|---|---|---|---|---|
306 Posted by dublthik on Thu Sep 3, 2009 3:49PM EDT Report Abuse
7of 10 not 2 bad, but not great either. I don't use AOL, On-line banking, Paypal, or credit cards of any type. Credit cards allow people to buy things that they don't need with money they don't have!!!!