{"id":1951,"date":"2021-08-17T08:35:59","date_gmt":"2021-08-17T06:35:59","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?post_type=glossary&#038;p=1951"},"modified":"2021-10-19T15:52:23","modified_gmt":"2021-10-19T13:52:23","slug":"phishing","status":"publish","type":"glossary","link":"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/phishing\/","title":{"rendered":"phishing"},"content":{"rendered":"<p><i><b>Phishing<\/b><\/i>&nbsp;es un&nbsp;t&eacute;rmino inform&aacute;tico que distingue a un conjunto de t&eacute;cnicas que persiguen el enga&ntilde;o a una v&iacute;ctima gan&aacute;ndose su confianza haci&eacute;ndose pasar por una persona, empresa o servicio de confianza (<a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/suplantacion-de-identidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">suplantaci&oacute;n de identidad<\/a> de tercero de confianza), para manipularla y hacer que realice acciones que no deber&iacute;a realizar (por ejemplo revelar informaci&oacute;n confidencial o hacer click en un enlace).&#8203;<\/p>\n<p>Para realizar el enga&ntilde;o, habitualmente se hace uso de la&nbsp;<a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/ingenieria-social\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">ingenier&iacute;a social<\/a>&nbsp;explotando los instintos sociales de la gente, como es de ayudar o ser eficiente. Tambi&eacute;n mediante la adulaci&oacute;n de la v&iacute;ctima, explotando su intr&iacute;nseca vanidad o necesidad de ser reconocido, baja autoestima, o una persona que busca trabajo. Por ejemplo, enviando correos electr&oacute;nicos o mostrando publicidades a la v&iacute;ctima dici&eacute;ndole que ha ganado un premio y que siga un enlace para recibirlo, siendo aquellas promesas falsas (un cebo). A veces tambi&eacute;n se hace uso de procedimientos inform&aacute;ticos que aprovechan vulnerabilidades. Habitualmente el objetivo es robar informaci&oacute;n pero otras veces es instalar <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/malware\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/a>, sabotear sistemas, o robar dinero a trav&eacute;s de fraudes.<sup id=\"cite_ref-gchq_3-0\" class=\"reference separada\"><\/sup>&#8203;<\/p>\n<p>A quien practica el phishing se le llama&nbsp;<i>phisher<\/i>.<sup id=\"cite_ref-4\" class=\"reference separada\"><\/sup>&#8203;<\/p>\n<p>Dado el creciente n&uacute;mero de denuncias de incidentes relacionados con el&nbsp;<i>phishing<\/i>, se requieren m&eacute;todos adicionales de protecci&oacute;n. Se han realizado intentos con leyes que castigan la pr&aacute;ctica y campa&ntilde;as para prevenir a los usuarios con la aplicaci&oacute;n de medidas t&eacute;cnicas a los programas.<\/p>\n<h3><span id=\"Origen_del_t&eacute;rmino\" class=\"mw-headline\">Origen del t&eacute;rmino<\/span><\/h3>\n<p>El t&eacute;rmino&nbsp;<i>phishing<\/i>&nbsp;proviene de la palabra&nbsp;inglesa&nbsp;&laquo;<i>fishing<\/i>&raquo; (pesca), haciendo alusi&oacute;n a utilizar un cebo y esperar a que las v&iacute;ctimas &laquo;muerdan el anzuelo&raquo;. Los cebos utilizados pueden ser muy variados.<sup id=\"cite_ref-ri5phi_5-0\" class=\"reference separada\"><\/sup>&#8203;<\/p>\n<p>Tambi&eacute;n se dice que el t&eacute;rmino&nbsp;<i>phishing<\/i>&nbsp;es la contracci&oacute;n de&nbsp;<i>password harvesting fishing<\/i>&nbsp;(cosecha y pesca de&nbsp;contrase&ntilde;as), aunque esto probablemente es un&nbsp;acr&oacute;nimo retroactivo, dado que la escritura&nbsp;<i>ph<\/i>&nbsp;es com&uacute;nmente utilizada por hackers para sustituir la&nbsp;<i>f<\/i>, como ra&iacute;z de la antigua forma de&nbsp;<i>hacking<\/i>&nbsp;telef&oacute;nico conocida como&nbsp;<i>phreaking<\/i>.<sup id=\"cite_ref-7\" class=\"reference separada\"><\/sup>&#8203;<\/p>\n<p>La primera menci&oacute;n del t&eacute;rmino&nbsp;<i>phishing<\/i>&nbsp;data de enero de&nbsp;1996&nbsp;en el&nbsp;grupo de noticias&nbsp;de&nbsp;<i>hackers<\/i>&nbsp;<i>alt.2600<\/i>&nbsp;y fue usado para denominar a quienes intentaban &laquo;pescar&raquo; cuentas de miembros de&nbsp;AOL.<sup id=\"cite_ref-8\" class=\"reference separada\"><\/sup>&#8203; Es posible que el t&eacute;rmino ya hubiera aparecido anteriormente en la edici&oacute;n impresa del bolet&iacute;n de noticias&nbsp;<i>hacker<\/i>&nbsp;<i>2600 Magazine<\/i>.<sup id=\"cite_ref-9\" class=\"reference separada\"><\/sup>&#8203;<\/p>\n<p>En el&nbsp;<i>phishing<\/i>&nbsp;en AOL el atacante se hac&iacute;a pasar como un empleado de AOL y enviaba un mensaje instant&aacute;neo a una v&iacute;ctima potencial. Para poder enga&ntilde;ar a la v&iacute;ctima de modo que diera informaci&oacute;n confidencial,<sup id=\"cite_ref-10\" class=\"reference separada\"><\/sup>&#8203; el mensaje pod&iacute;a contener textos como &laquo;verificando cuenta&raquo; o &laquo;confirmando informaci&oacute;n de factura&raquo;. Una vez el usuario enviaba su contrase&ntilde;a, el atacante pod&iacute;a tener acceso a la cuenta de la v&iacute;ctima y utilizarla para varios prop&oacute;sitos criminales, incluyendo el&nbsp;spam.<\/p>\n<p>Ver tambi&eacute;n la entrada <a href=\"https:\/\/www.infordisa.com\/soc\/que-es-el-phishing\/\">&iquest;Qu&eacute; es phishing?<\/a><\/p>\n<p><strong>Sin&oacute;nimo: <\/strong><em>vishing, <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/smishing\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>smishing<\/a>, <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/spear-phishing\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">spear phishing<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Phishing \u00e9s un terme inform\u00e0tic que distingeix a un conjunt de t\u00e8cniques que persegueixen l&#039;engany a una v\u00edctima guanyant-se la seva confian\u00e7a fent-se passar per una persona, empresa o servei de confian\u00e7a, per manipular-la i fer que realitzi accions que no hauria de fer.<\/p>","protected":false},"author":2,"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-1951","glossary","type-glossary","status-publish","hentry"],"acf":[],"yoast_head":"<title>phishing - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glossari-definicio\/phishing\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"phishing - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Phishing es un t&eacute;rmino inform&aacute;tico que distingue a un conjunto de t&eacute;cnicas que persiguen el enga&ntilde;o a una v&iacute;ctima gan&aacute;ndose su confianza haci&eacute;ndose pasar por una persona, empresa o servicio de confianza, para manipularla y hacer que realice acciones que no deber&iacute;a realizar.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/glossari-definicio\/phishing\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:modified_time\" content=\"2021-10-19T13:52:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2022\/02\/soc-infordisa-2022.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/glosario-definicion\\\/phishing\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/glosario-definicion\\\/phishing\\\/\",\"name\":\"phishing - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2021-08-17T06:35:59+00:00\",\"dateModified\":\"2021-10-19T13:52:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/glosario-definicion\\\/phishing\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/glosario-definicion\\\/phishing\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/glosario-definicion\\\/phishing\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"phishing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]}]}<\/script>","yoast_head_json":{"title":"phishing - INFORDISA \/ Security Operations Center","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/glossari-definicio\/phishing\/","og_locale":"ca_ES","og_type":"article","og_title":"phishing - INFORDISA \/ Security Operations Center","og_description":"Phishing es un t&eacute;rmino inform&aacute;tico que distingue a un conjunto de t&eacute;cnicas que persiguen el enga&ntilde;o a una v&iacute;ctima gan&aacute;ndose su confianza haci&eacute;ndose pasar por una persona, empresa o servicio de confianza, para manipularla y hacer que realice acciones que no deber&iacute;a realizar.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/glossari-definicio\/phishing\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_modified_time":"2021-10-19T13:52:23+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2022\/02\/soc-infordisa-2022.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@infordisa","twitter_misc":{"Temps estimat de lectura":"3 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/phishing\/","url":"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/phishing\/","name":"phishing - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2021-08-17T06:35:59+00:00","dateModified":"2021-10-19T13:52:23+00:00","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/phishing\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/glosario-definicion\/phishing\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/phishing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"phishing"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/glossary\/1951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/glossary"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/glossary\/1951\/revisions"}],"predecessor-version":[{"id":2944,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/glossary\/1951\/revisions\/2944"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=1951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}