The guys at Netcraft, a British security consultancy that has done a good job of tracking, exploring and warning about phishing, say they’ve come across the first case of cross site scripting being used in the wild for phishing purposes. This isn’t as arcane as it sounds, since it allows phishers to make their lure… Read More »
Gradually the tentacles of the Russian gangs behind phishing are appearing. But we still have no idea how it really works, and how big the beast is. The Boston Herald reports today on the arraignment of a “suspected Russian mobster” on multiple counts of identity fraud, having allegedly obtained personal information from more than 100 victims… Read More »
Is it time that financial websites just stopped communicating with customers via email? I would have thought it was a bit extreme, but I’m not sure banks can be trusted to continue sending out emails to customers. I’ve talked before about how emails from institutions are hard to distinguish from phishing emails, further confusing customers,… Read More »
Interesting piece by TechWeb News on Microsoft employee Raymond Chen, who has “saved every spam message and virus-laden e-mail he’s received at work since 1997”. More intriguingly, he has “graphed the spams and viruses to create a cool visual representation of one man’s malicious traffic”. The resulting chart is fascinating. You can see the whole… Read More »
Interesting to see how phishing has become a threat in its own right, along with viruses and spam, and is becoming part and parcel of ‘security solutions’ offered by the Internet messaging industry. Take MailFrontier, for example, the Palo Alto-based “pioneer in email security and leading provider of anti-spam solutions” who today announced , today… Read More »