Via fake login pages is the easiest method to hack passwords. Identifying a fake login page is very simple but lots of people ignore to do some small checks before entering the login information and fall in the trap. I have seen a many people paying 400$ for a fake login page of paypal. This proves that there are still people falling in this trap. This is just an example, there are many fake websites of yahoomail, banks, Facebook, hotmail, gmail,orkut,myspace etc …

This article is an attempt to show what a hacker does to hack your password via fake login pages and how to defend yourself from those fake logins.I will try to keep this post as simple as possible, there may be several technical details which you can safely leave out.

What goes on behind when you enter your login details in login form??

When you enter your login details in any login form and press enter they are submitted to another page which reads these login information and checks the database if you entered the accurate username and passowrd, if yes then you will be taken to your account else you will get an error page.

What an hacker does??

A hacker creates a fake page which looks just same as the original page and some how tricks you to enter your login details in that page. These login details are then submitted to a file.At this step the hacker has two options He can either savethe login details on his server machine or he can straight get them mailed to his email address. All the above said things happen behind the scenes, you will have no hint of it. When you submint you login details for the first time your details are submitted to the hacker and you will be directed to a error page. When you enter your login details once more you will be logged in to your account successfully. It’s quite ordinary for us to enter the login details wrongly sometimes so you will not become doubtful when you get the error page.

How to identify fake login page traps ??

   1. Always verify site before entering your login detail.

   2. Type URL directly into address bar (Never copy paste).

   3. Never follow any links you get in email and during chatting even if they are from your friends.

   4. Have look in address bar and verify that Address is correct as it should be

For hacking purpose some people buy doamins which look like to the original site eg... pay-pal for paypal, 0rkut for orkut, yahooo for yahoo.

Some times you may over look these small differences and fall in trap.

5. Please do report to the hosting site or the original site holder when you discover a fake login page.

   6. If you feel like you submitted your information in a fake login page change your password instantly.