Why is this scam called "phishing"

Why is this Internet scam called “phishing”? Does it have anything to do with the band Phish?

It’s just an alternate spelling of “fishing”–which is an apt description of the process. You cast out thousands of spam emails, hoping to catch just a few victims. The spelling of the name may have been inspired by the term “phreaking”, which is the term for a variety of telephone system hacks and cheats.

Everything internet-related has to be spelled funny to make my friend look silly because he always tries to pronounce it differently too.

As noted, it’s a natural term, and as “fishing” has been applied to a series of related tricks to get people to give up security info since the very, very early days. A common stunt on mainframes running in teletype environments was to write a program which mimiced the system login, and leave it running on a public terminal, storing away the user and password somewhere, and logging off, so that the victim would just think their first attempt at logging in didn’t work. These things were often called “fishing” programs. “phishing” is just a trendy spelling.

Eventually, we’ll probably have to teach the world at large to use certificates for all sensitive transactions, and learn how to review them so that phishing scams can’t just use bogus or irrelevent certificates, like a few are already doing.

Yep. I did just this in college many, many moons ago, on a DEC Vax system. It got about 5 or 6 logins, including a sysadmin. It also got me kicked out of the computer lab for two weeks. :smiley:

N.B. Don’t give your password-stealing batch files obvious names like TRAP.BAT. :wink:

This seems like the most plausible explanation. Of course, now you have to explain where “phreaking” came from. :stuck_out_tongue:

Source: http://www.ftc.gov/bcp/conline/pubs/alerts/phishingalrt.htm
This is unrelated to something else called pishing (and sometimes spelled as phishing) which is a method of expelling air through pursed lips to draw in birds.

Source: http://www.bbc.co.uk/nature/animals/birds/weeklyfeature/callingallbirds/

So you went phishing and got something else as well. The early phish gets the worm.

:smiley:

Mostly a portmanteau of “phone hacking”. Now we just need to establish where “hack” came from… :wink:

Early on, telephone system hackers were called “phone freaks” for obvious reasons, which quickly morphed to “phone phreaks”, undoubetdly because of the cute repetition of the initial “ph”. From there, it was only natural to apply the term “phreaking” to describe the activities of these individuals.

No, first we have to define “portmanteau”:

port·man·teau n. pl. port·man·teaus or port·man·teaux (-tz, -tz)
A large leather suitcase that opens into two hinged compartments.
[French portemanteau : porte-, from porter, to carry (from Old French. See port5) + manteau, cloak (from Old French mantel, from Latin mantellum).]
The American Heritage® Dictionary of the English Language, Fourth Edition

A bag or case, usually of leather, for carrying wearing apparel, etc., on journeys. --Thackeray. Source: Webster’s Revised Unabridged Dictionary, © 1996, 1998 MICRA, Inc.
n 1: a word formed by joining two others (e.g., smog' is a blend of smoke’ and `fog’)
Source: WordNet ® 1.6, © 1997 Princeton University
Ahhhhhhhhhhhhhh.

Trey Anastasio happens to be an international criminal mastermind when he’s not busy playing guitar.

You don’t really want to start the old fight about the difference between hacking and cracking, do you? :wink:

DancingFool