Personalized Image Solutions for Phishing Prevention

Meshswap
Meshswap
Published in
5 min readMar 30, 2023

Hello.

Meshswap Community Members.

Meshswap’s website now offers personalized image solutions for phishing prevention.

Personalized Image Solutions for Phishing Prevention Announcement

Ozys is a leading company in DeFi autonomous finance. With Orbit Bridge, Ozys’ main infrastructure for cross-chain liquidity exchange, the company is expanding its ecosystem by transplanting multichain economy-based DEXs and related financial infrastructure to major mainnets like Klaytn, Polygon, and Ton. With extensive experience in service commercialization and Dapp development using top-notch technology, Ozys not only offers users various financial opportunities, but also works to protect user assets against hacking attacks by partnering with security companies like Theori, Certik, HAECHI Labs, and SOOHO to conduct smart contract code vulnerability/security audits (Audits) regularly.

Despite the developer’s efforts, DeFi users still have difficulty safely managing keys (DYOR, Do Your Own Risk) due to the website’s method of contracts communicating directly with the website (front) and phishing scams continue to expose users to the risk of stealing private keys and mnemonic phrases.

Web security vulnerabilities cause not only personal asset losses, but also economic losses across industries, hindering industry growth. As a leading company in decentralized finance, Ozys recognizes and strives to address these challenges by conducting research and development on various fronts. As part of its efforts,Ozys has collaborated with its security partner ChainLight of Theori the “Personalized Image Solution for Phishing Prevention,” which will be gradually implemented on all Ozys’ service websites. The personalized image solution for phishing prevention is widely used in the general financial industry to prevent electronic financial fraud. Therefore, it is familiar to many users. The use of a personalized image solution for phishing prevention can be an effective preventative measure for users to protect and manage their own digital assets properly.

Main Concepts

✅ Phishing

Phishing is a compound word that means fishing for private data. It is a non-face-to-face transaction using telecommunication means such as phone, text message, messenger, and fake websites to defraud and blackmail victims to obtain users’ personal information or information. It refers to a fraudulent method of stealing financial information and extorting the property of others.

✅ Phishing Website

A phishing website refers to a fraudulent technique that causes various attacks, especially financial damage, after requesting users’ personal and financial information through a homepage similar to the real one.

✅ Personalized Image

The personalized image is a combination of the image selected by the user and the personally recognized character entered by the user and is a security service to distinguish each website from Ozys apart from phishing websites. Since the personalized image set by the user is the information only the user can know. It can be hard to secure that information or implement it in the same form on phishing sites. Therefore, it helps users prevent phishing damage.

The personalized image set by the user can be registered and checked regardless of the wallet connection and is applied for each browser, not stored on the service site or remote server. Therefore, if you reinstalled the browser, deleted the browser cache/data, or used the browser in incognito mode, you may reset the registered personalized image.

If the registered personalized image is not initialized and displayed even though there are no those reasons, there is a potential risk of phishing damage. We recommend registering your personalized image after checking whether the site address you accessed is correct. Afterward, check the image is displayed on the website.

*There may be phishing via pop-up with messages below.

“The personalized image has been initialized due to server maintenance. Please set again.”

Technically, the server cannot delete your local storage, so we ask that you pay special attention to the above pop-up or message. If you see a pop-up with messages asking you to reset your personalized image, please check the domain you are currently accessing and the latest announcement from the Meshswap official community.

You can find the registered personalized images at the top of the website. If the image is not displayed on the page or is shown differently from the registered information you have chosen, never proceed with information input, wallet approval, and transactions on the page. Please use it after sufficiently verifying the site, including the above reconfirmation measures. You can change personalized images an unlimited number of times.

You can register personalized images for phishing prevention

in the following Ozys service.

Guide to Registering Personalized Images

*This guide is written using Meshswap as an example.

1. Select [Set Anti-phishing] on the top right corner of the service.

2. After checking the guide to registering personalized images, select the [Continue] button.

3. Please enter three pieces of information to register: (1) image, (2) color, and (3) personal recognition characters (Korean/English/numbers, up to 5 characters). After confirming your final personalized image at the bottom, select the [Register Personalized Image] button.

4. Once registration is complete, the image will be displayed on the upper right corner of the website.

* Caution

1) Registration or verification of a personalized image does not require connecting the wallet, and the image isn’t stored on either the service site or the remote server but is applied browser by browser. Hence, clearing users’ browser cache/date or using incognito mode may result in the reset of your personalized image.

2) In the case that the registered personalized image isn’t displayed despite there being any such reason, a phishing attack could occur. Therefore, it is recommended that you double-check the site link, register users’ personalized images, and use the site when the personalized image appears.

3) Personalized images registered by the user can be found at the top of the site. In the event that registered personalized images don’t appear on the screen or are displayed differently, do not provide any information to the website, do not approve wallet connections, or approve any transactions. Use the website only after thoroughly verifying it, including the verification mentioned above procedures.

4) Changes to personalized images are unlimited.

--

--

Meshswap
Meshswap

On the liquidity mesh, earn more with your crypto