Phishers Using New Methods To Steal User Information
Yahoo News Reports That Phishers Using New Methods To Steal User Information
Elizabeth Millard, newsfactor.comThu May 5, 1:37 PM ET
Phishers have been changing tactics recently in an effort to avoid detection and steal user information, according to researchers at security software firm Websense.
In a recent report, Websense and the Anti-Phishing Working Group have noted that there is a rise in the use of keyloggers, programs that record the key strokes of users.
A phisher who has this type of information would have access to passwords, account numbers and other personal data.
In the past, attackers have relied more heavily on e-mail messages that trick users into clicking onto a malicious Web site or handing over their usernames and passwords for online financial sites.
Log Roll
During every week in February and March, Websense reported 10 new keylogger variants as well as more than 100 new Web sites set up to infect computers with the malicious programs.
That is an increase from last November and December, when Websense found only 2 new variants and about 15 new Web sites per week.
Phishers have employed other techniques in the past as well, including exploiting bogus news feeds and taking advantage of mistyped Web addresses for major sites like Amazon.com (Nasdaq: AMZN - news) and Google (Nasdaq: GOOG - news).
Being Oblivious
The spreading use of keylogging indicates a trend in phishing activity of removing user interaction from the phishing process.
Already, attackers have found a way to create e-mail lures that do not require user behavior to infect a machine.
Keyloggers, also, would not necessarily need a user for download. These could be placed in an e-mail message that downloads the program automatically even if a user does not open the attachment.
Wait and See
The increasing sophistication of phishing efforts has been expected in the security industry, said Sophos senior technology consultant "
Click on the title of this article to go back to the main article and references to related stories.
Peter ===> We love comments about our posts good or bad!
Elizabeth Millard, newsfactor.comThu May 5, 1:37 PM ET
Phishers have been changing tactics recently in an effort to avoid detection and steal user information, according to researchers at security software firm Websense.
In a recent report, Websense and the Anti-Phishing Working Group have noted that there is a rise in the use of keyloggers, programs that record the key strokes of users.
A phisher who has this type of information would have access to passwords, account numbers and other personal data.
In the past, attackers have relied more heavily on e-mail messages that trick users into clicking onto a malicious Web site or handing over their usernames and passwords for online financial sites.
Log Roll
During every week in February and March, Websense reported 10 new keylogger variants as well as more than 100 new Web sites set up to infect computers with the malicious programs.
That is an increase from last November and December, when Websense found only 2 new variants and about 15 new Web sites per week.
Phishers have employed other techniques in the past as well, including exploiting bogus news feeds and taking advantage of mistyped Web addresses for major sites like Amazon.com (Nasdaq: AMZN - news) and Google (Nasdaq: GOOG - news).
Being Oblivious
The spreading use of keylogging indicates a trend in phishing activity of removing user interaction from the phishing process.
Already, attackers have found a way to create e-mail lures that do not require user behavior to infect a machine.
Keyloggers, also, would not necessarily need a user for download. These could be placed in an e-mail message that downloads the program automatically even if a user does not open the attachment.
Wait and See
The increasing sophistication of phishing efforts has been expected in the security industry, said Sophos senior technology consultant "
Click on the title of this article to go back to the main article and references to related stories.
Peter ===> We love comments about our posts good or bad!
Please make comments by clicking on the word "Comments"!
Click on the Envelope to forward posts to your friends! Thank you! The staff.
posted by The Peter Files Blog of Comedy : Friday, May 06, 2005
Home of the Best Doctor Who Podcast in Time and Space
0 Comments:
Post a Comment
<< Home
New Peter Files Blog Selected Comedy Videos!
Day By Day - - Copyright 2007 by Chris Muir, All Rights Reserved