Propuesta de mejora y eficiencia en la detección y neutralización de sitios de phishing y suplantación en una institución bancaria colombiana

Abstract

This document comprehensively addresses cases of web spoofing targeting a financial institution, perpetrated by cybercriminals with the clear intention of obtaining illicit benefits. The main objective of such criminal actions is to gain access to confidential information of the bank's clients, as well as to carry out fraudulent transactions for the extraction of funds from the affected accounts. In the course of the analysis, the different types of malware that are usually used in these phishing acts will be explored, as well as the different fraudulent pages that imitate the appearance of a Financial Institution with the purpose of deceiving users will be identified. In addition, robust risk mitigation strategies will be developed to minimize the vulnerability of the brand and its customers to these cyber threats. These strategies are designed to strengthen security protocols, implement preventive and educational measures for users, and establish effective detection and response mechanisms for possible web spoofing incidents.