A MINI PROJECT REPORT

ON
“Phishing Attacks: Exploiting Human
Vulnerability”

SUBMITTED TO THE SAVITRIBAI PHULE PUNE UNIVERSITY, PUNE

IN THE PARTIAL FULFILLMENT OF THE REQUIREMENTS FOR THE
AWARD OF THE

BACHELOR OF ENGINEERING
(COMPUTER ENGINEERING)
BY

Rohit Kulthe BE-A(40)

DEPARTMENT OF COMPUTER ENGINEERING

SHALAKA FOUNDATION’S
KEYSTONE SCHOOL OF ENGINEERING

NEAR HANDEWADI CHOWK, PUNE-412308

ACADEMIC YEAR 2024-25

 SHALAKA FOUNDATION’S
KEYSTONE SCHOOL OF ENGINEERING
DEPARTMENT OF COMPUTER ENGINEERING

CERTIFICATE

This is to certify that the SPPU Curriculum-based Mini-Project report entitled

“Phishing Attacks: Exploiting Human Vulnerability”

Submitted by

Rohit Kulthe BE:A(40)

Are bonafide students of this institute and the work has been carried out by them under the
supervision of Prof. Sonal Chanderi and it is approved for the partial fulfilment of the
requirement of Savitribai Phule Pune University, for the award of the degree of Bachelor
of Engineering (Computer Engineering)

Prof. Sonal Prof. Sagar Rajebhosale Dr. Sandip Kadam

Chanderi
Mini Project Head of Department Principal
Guide

Place:
Date :
 ACKNOWLEDGEMENT

It gives me immense pleasure to present this Mini-Project report on “Phishing

Attacks:Exploiting Human Vulnerability”. I would like to extend my deepest gratitude to my
guide, Prof. Sonal Chanderi, for their unwavering support, valuable guidance, and insightful
feedback throughout the project. Their constant encouragement helped me delve deeper into the
complexities of ransomware and its impact on global infrastructure.
I am also sincerely grateful to our Head of Department, Prof. Sagar Rajebhosale, for his
invaluable insights and continuous motivation during this project. His leadership and dedication to
fostering an environment of learning have been truly inspiring. I also express my heartfelt thanks to
Dr. Sandeep Kadam, Principal of our institution, and Prof. Y.R. Soman, Director, for their
encouragement and cooperation throughout the project.

Rohit Kulthe
 ABSTRACT

Phishing attacks, a prevalent form of cybercrime, exploit human trust and social engineering
to deceive victims into divulging sensitive personal or financial information. Typically
executed through fraudulent emails, websites, or communication channels, phishing targets
individuals and organizations alike. The widespread reach and simplicity of these attacks
make them particularly dangerous, leading to massive financial losses, identity theft, and
large-scale data breaches across various industries. This mini-project examines the
mechanisms of phishing attacks, their execution, and their profound global impact. It also
investigates the methods used to track and combat such attacks, highlighting the importance
of proactive defense strategies, employee training, and technical countermeasures. By
analyzing real-world case studies, this project provides insights into how both individuals
and organizations can strengthen their defenses against the ever-growing threat of phishing.
 INDEX
Topic Page No.

1 Certificate

2 Abstract/Introduction

3 Types of Cyber crime (any one) decribe

4 Victim Description

5 Crime execution details

6 Investigation method

7 Impact

8 Learning from study

9 Conclusion
 [Link]

As the digital age continues to evolve, cyber threats have become increasingly sophisticated, posing
significant risks to both individuals and businesses. One of the most common and effective methods
employed by cybercriminals is phishing. Phishing attacks rely on social engineering to trick victims into
revealing confidential information, such as usernames, passwords, credit card numbers, or other personally
identifiable information. These attacks often masquerade as legitimate communications from trusted
organizations—such as banks, tech companies, or government agencies—making it difficult for victims to
recognize the deception.

The impact of phishing extends beyond mere financial theft. Phishing attacks are often the gateway to more
extensive security breaches, such as data theft or ransomware attacks, leading to severe operational
disruptions. In many high-profile breaches, phishing was the initial attack vector, demonstrating the
vulnerability of even well-protected networks when human error is exploited. This project focuses on
understanding the technical and psychological aspects of phishing, the methods used to execute these
attacks, and the global impact they have had on various industries. It also emphasizes the critical role of
user education and robust cybersecurity frameworks in mitigating these threats.

6
 3. TYPES OF CYBER CRIME

Phishing is a form of cybercrime where attackers impersonate legitimate entities to trick victims into
providing sensitive information or clicking on malicious links. Phishing can be categorized into several
distinct types, each varying in scope and technique:

1. Email Phishing: This is the most common form of phishing, where attackers send fraudulent emails
appearing to come from reputable sources like banks or service providers. These emails typically
contain links to fake websites that closely resemble real ones. Once the victim enters their login
credentials or other sensitive information, it is captured by the attackers. In some cases, the emails
may also include malicious attachments that install malware on the victim's system.
2. Spear Phishing: Unlike generic phishing emails, spear phishing is highly targeted. Attackers
customize emails for specific individuals or organizations, often using personal details to make the
email appear more credible. Spear phishing is frequently used in corporate environments to gain
access to confidential company information or financial systems. For instance, attackers might target
HR or finance departments to steal payroll information or initiate fraudulent transactions.
3. Whaling: This is a subset of spear phishing that specifically targets high-level executives or
important decision-makers within a company, such as CEOs or CFOs. The goal of whaling attacks
is often to initiate large financial transfers or gain access to confidential company data. Attackers
typically craft the email to look like a critical communication from a trusted partner or another senior
executive.
4. Clone Phishing: In this type of phishing, attackers take a legitimate email previously sent to the
victim and replace its attachments or links with malicious ones. Since the email appears to come
from a trusted source, the victim is more likely to click on the harmful links, thus falling into the
trap.

Phishing remains a potent cybercrime because it preys on human trust, often bypassing sophisticated
security measures by manipulating users directly. Attackers can execute a phishing campaign with minimal
technical expertise but reap substantial rewards by stealing sensitive data, leading to financial fraud and
identity theft.

7
 [Link] DESCRIPTION

Phishing attacks cast a wide net, affecting individuals, businesses, and even government institutions. Some
of the primary victims include:

1. Individuals: One of the most common targets of phishing attacks are individual users, particularly
those less familiar with cybersecurity risks. Attackers often pose as representatives from banks,
social media platforms, or online retailers, convincing victims to click on fake links or share personal
information. Victims may unknowingly reveal their credit card numbers, passwords, or even social
security numbers, which attackers can then use for identity theft or financial fraud.
2. Businesses: Corporations, particularly those in sectors such as finance, healthcare, and technology,
are frequent targets of phishing attacks. Attackers use spear phishing tactics to trick employees into
revealing corporate login credentials or clicking on links that download malware, which can then
lead to large-scale data breaches. The consequences can be severe, with stolen intellectual property,
disrupted operations, or financial losses from fraudulent transactions. For instance, the 2020 Twitter
hack was initiated by phishing attacks, leading to the compromise of several high-profile accounts.
3. Government and Educational Institutions: Public sector organizations are also frequent targets of
phishing attacks, as they often hold large amounts of sensitive data. Attackers may target these
institutions to steal personal information or disrupt operations. For example, phishing attacks on
universities often lead to unauthorized access to student records or financial aid information.

Phishing can have devastating consequences for victims, ranging from financial ruin for individuals to
multi-million-dollar losses for corporations. In many cases, it also leads to reputational damage, especially
when sensitive customer data is exposed.

8
 [Link] EXECUTION DETAILS

Phishing attacks are meticulously planned and executed to manipulate the victim into disclosing sensitive
information or performing actions that compromise their security. Below is a step-by-step breakdown of
how phishing attacks are executed:

1. Preparation and Targeting

Attackers begin by gathering as much information as possible about their potential targets, a process known
as reconnaissance. This might involve:

 Researching company websites or social media profiles.

 Using publicly available information (like job titles or email addresses) to make the phishing email
appear credible.
 For more targeted attacks, such as spear phishing, attackers may gather personal information about
the victim, like their work role, recent activities, or contacts, to make the phishing email seem even
more personalized.

Example: If a company recently made a public announcement, an attacker might craft an email that appears
to be about that announcement, using names of executives or departments mentioned in the news.

2. Creating a Deceptive Email

Attackers craft a fraudulent email that appears to come from a trusted entity, such as a bank, a social media
platform, or a known contact within the organization. The email usually has these characteristics:

 Spoofed email addresses: Attackers often use domains that look almost identical to real ones, e.g.,
using “@[Link]” instead of “@[Link].”
 Convincing content: The email content mimics the style, tone, and layout of the legitimate
organization, making it harder for the victim to detect the fraud.
 Call to action: Phishing emails typically prompt the recipient to perform an action, such as:
o Clicking on a link that leads to a malicious website that mimics a real login page, prompting
the victim to enter their credentials.
9
 o Downloading a malicious attachment that installs malware (e.g., keyloggers, ransomware)
on their device.

3. Exploiting Psychological Manipulation

Phishing attacks rely heavily on social engineering tactics to exploit human emotions and decision-making.
These tactics may include:

 Urgency and fear: Attackers often use language that creates a sense of urgency, such as claiming
that an account will be suspended unless immediate action is taken, or suggesting a fraudulent
transaction has occurred.
o Example: An email might say, “Your bank account has been compromised. Click here to
reset your password immediately.”
 Authority: Attackers may impersonate high-ranking officials, such as executives (in the case of
whaling) or government agencies (e.g., the IRS), to coerce the victim into complying with the
request.
 Rewards and incentives: Some phishing scams offer prizes, discounts, or job opportunities to entice
victims into clicking malicious links.
o Example: “You’ve won a $500 gift card! Click here to claim your reward.”

4. Malicious Website and Credential Harvesting

When the victim clicks the link in the phishing email, they are often directed to a malicious website
designed to look like a legitimate login page (e.g., a bank or corporate login). The website mimics the design,
logo, and branding of the real site but is controlled by the attacker. When the victim enters their credentials,
the attacker captures them in real-time.

The harvested credentials are then:

 Used for identity theft or fraud.

 Sold on the dark web.
 Utilized for further attacks like breaching corporate networks or conducting financial theft.

10
5. Use of Malware

In some cases, phishing attacks are not only designed to steal information but also to install malware on the
victim’s system. This malware can be:

 Keyloggers: Software that records the victim’s keystrokes, capturing passwords and sensitive
information.
 Ransomware: Malware that encrypts the victim’s files and demands payment for their release.
 Remote Access Trojans (RATs): Software that gives attackers remote control over the victim’s
computer, allowing them to steal data or launch further attacks.

11
 [Link] METHODS

Phishing investigations are complex and require collaboration between cybersecurity professionals, forensic
analysts, law enforcement, and affected organizations. Below are key investigation methods used to trace
and mitigate phishing attacks:

1. Email Forensics

The first step in investigating a phishing attack is analyzing the phishing email itself. Investigators perform:

 Header analysis: The email headers are examined to trace the source of the email, including IP
addresses, timestamps, and routing paths. This can help determine whether the sender’s address was
spoofed and where the email originated from.
 Domain analysis: The domains used in the email (e.g., the sender’s email domain or any URLs) are
scrutinized. Investigators may identify newly registered domains or slight variations of legitimate
domains (e.g., [Link] vs. [Link]).
 Content analysis: The language and structure of the email are analyzed to identify common phishing
patterns and match the tactics to known phishing groups.

2. Phishing Website Detection

Cybersecurity teams work to detect and shut down phishing websites that attackers use to steal credentials.
This process involves:

 URL analysis: Analyzing the URL in the phishing email to determine whether it leads to a malicious
website. Cybersecurity experts may also use tools like domain reputation databases to assess the
trustworthiness of the site.
 Phishing site takedown: Once a phishing site is identified, investigators collaborate with web
hosting providers to have the malicious site taken offline.
 Phishing database comparison: The phishing email or website is compared against known phishing
databases to detect similarities with previous attacks, helping identify trends or organized
cybercrime groups.

12
3. Malware Analysis

If the phishing attack involved malware, cybersecurity experts perform malware analysis to understand its
behavior and origin:

 Static and dynamic analysis: Experts examine the malware’s code (static) and execute it in a
controlled environment (dynamic) to observe its behavior. This helps identify the type of malware,
its payload, and its potential effects on infected systems.
 Decryption tools: If ransomware was involved, experts may attempt to develop decryption tools to
help victims recover their files without paying the ransom.

4. Financial Tracking

In cases where phishing leads to financial fraud, investigators trace the flow of stolen funds:

 Cryptocurrency tracing: When attackers demand ransom or financial transactions in

cryptocurrencies (such as Bitcoin), blockchain analysis tools are used to trace transactions on the
public ledger. Though attackers often use tumblers or mixers to obscure their tracks, careful analysis
can still reveal patterns.
 Bank transaction monitoring: Investigators track fraudulent transactions made through traditional
financial institutions. They may collaborate with banks to freeze accounts associated with suspicious
activity.

5. Coordination with Law Enforcement

Phishing investigations often involve coordination with law enforcement agencies such as the FBI or
INTERPOL. These agencies provide:

 Intelligence sharing: Law enforcement shares intelligence on known phishing groups and attack
vectors with cybersecurity teams.
 International cooperation: Since phishing attacks often originate from outside the victim’s country,
international cooperation is crucial in tracking and apprehending cybercriminals.

13
6. Public Awareness and Reporting

Organizations and cybersecurity agencies often run public awareness campaigns to educate users about
phishing attacks. Reporting platforms are set up where victims can submit suspicious emails, which are
analyzed to create better defenses.

14
 [Link]

Phishing attacks can have a wide-reaching impact on individuals, organizations, and society as a whole:

1. Financial Losses

The financial consequences of phishing attacks are significant and often devastating:

 For individuals: Victims of phishing can suffer direct financial losses when attackers gain access to bank
accounts or credit cards. In some cases, attackers may also steal and sell the victim’s identity, resulting in
further financial damage.
 For businesses: Phishing attacks lead to corporate financial losses, especially when attackers gain access to
sensitive financial information, initiate fraudulent wire transfers, or steal intellectual property. According to
the FBI, businesses lost billions of dollars in Business Email Compromise (BEC) schemes, a specific form
of spear phishing.
 For government institutions: Phishing attacks targeting government organizations can disrupt services and
lead to the theft of sensitive data, resulting in additional expenses to strengthen cybersecurity defenses and
mitigate the fallout.

2. Reputation Damage

Phishing attacks can cause long-lasting damage to an organization’s reputation, particularly in cases where
a data breach occurs:

 Customer trust: If a company’s customers fall victim to phishing due to a data breach, the loss of trust can
result in significant customer churn and a tarnished brand reputation.
 Legal consequences: Companies are often subject to legal action if sensitive customer data is exposed. This
can lead to expensive lawsuits and regulatory fines for failing to protect data adequately.

3. Operational Disruption

Phishing attacks can paralyze organizations, causing severe operational disruptions:

 System downtime: Malware installed via phishing emails can lock users out of critical systems, resulting in
halted operations and downtime. Ransomware attacks, for example, can prevent businesses from accessing
15
essential data until the ransom is paid.
  Healthcare impact: In healthcare, phishing attacks can lead to the shutdown of electronic health records
(EHR) systems, delaying patient care and jeopardizing lives. Hospitals have been forced to reschedule
surgeries and appointments due to ransomware attacks triggered by phishing emails.

4. Data Breaches

Phishing is often the entry point for larger-scale cyberattacks, such as data breaches:

 Loss of sensitive information: When attackers gain access to corporate networks via phishing, they can steal
sensitive information such as customer data, intellectual property, or strategic business plans. High-profile
data breaches, like the Equifax breach, were initiated through phishing, affecting millions of individuals.
 Regulatory fines: When companies experience data breaches due to phishing attacks, they may face
regulatory fines under laws like GDPR (General Data Protection Regulation) or CCPA (California Consumer
Privacy Act), which mandate the protection of personal data.

5. Psychological Impact

For individual victims, phishing can cause emotional distress:

 Fear and anxiety: Victims of identity theft or financial fraud often experience heightened fear and anxiety
over the loss of control over their personal information. The psychological toll of recovering from a phishing
attack—canceling credit cards, restoring identity, or dealing with financial institutions—can be
overwhelming.

16
 [Link] FROM STUDY

The study of phishing attacks highlights several critical lessons:

1. Employee Training: Regular phishing awareness training for employees is essential. Many
companies have found success by running simulated phishing campaigns to test and improve staff
responses to such threats.
2. Multi-Factor Authentication: One of the most effective defenses against phishing is implementing
multi-factor authentication (MFA). Even if an attacker gains a user's credentials, MFA adds an
additional layer of security, making unauthorized access more difficult.
3. Proactive Cybersecurity Measures: Companies must invest in advanced email filtering systems,
URL reputation services, and threat intelligence feeds to detect and block phishing emails before
they reach employees.

17
 [Link]

Phishing continues to be one of the most dangerous and successful forms of cybercrime, exploiting human
trust and technical vulnerabilities. By studying the techniques used in phishing attacks and understanding
their impact, organizations and individuals can take proactive steps to defend against them. Implementing
robust cybersecurity practices, providing regular employee training, and utilizing multi-factor authentication
are crucial in reducing the risk of falling victim to phishing. As cybercriminals evolve their techniques,
staying informed and vigilant will remain essential in mitigating this persistent threat.

18