Hackers Birth Automated Phishing Kit that Never Dies
- by Carlo Orlando on 20100803 @ 10:28PM EST | google it | send to friends
- Filed under Security | (related terms: phishing attack, information, stolen, fraudulent, masquerading)
Hackers have now started using what is being referred to as "indestructible" cloud computing-based phishing attacks.
In short, a phishing attack is a "criminally fraudulent process of attempting to acquire user names, passwords, and credit card details by masquerading as a trustworthy website." (Source: wikipedia.org)
For example, you may have received a dubious email asking you to "update" your banking information or to "change your online banking password." These are typical phishing scams whereby the information you input is stolen by fake websites masquerading as a bank and then used to drain your account.
Phishing Attacks Disrupted, but Not Gone
That said, the way a phishing attack is executed is somewhat complex. Up until now, most fraudulent phishing sites have been fought by taking down their main server, which essentially removes the fraudulent website and the point where data is collected.
With the cloud computing format, however, the data collection space is hosted separately from the actual phishing website, and hence, never dies. This is good news for hackers, since using a cloud-based methodology means that even if their phishing site is disrupted, scamsters simply re-post their site in a new location. This re-posting, and not its complete and utter removal, gives the phishing attack never-ending life. (Source: itpro.co.uk)
Master Hackers Dupe Subsidiary Hackers
The cloud-based method was reportedly created by two unnamed "master hackers" and posted on hacker forums across the Internet. The more hackers that used the method, the more information was stolen and sent to the master hackers. (Source: itpro.co.uk)
"The irony is that anyone using this kit becomes an unknowing member of the master hacker's army. When hackers use this kit and deploy a successful phishing campaign, all the stolen credentials and information goes straight back to the master hacker without the proxy hacker's knowledge. It's very clever. The master hacker never needs to conduct a campaign to see financial gain," says security strategy expert Rob Rachwald of Impervia. (Source: securecomputing.net.au)
Verified by Visa Protection Scheme Cloned
If indestructible phishing kits were not enough to have security companies reeling, consider the next threat: hackers have been able to successfully clone the Verified by Visa and MasterCard SecureCode protection features used by millions of online consumers each day. (Source: itpro.co.uk)
Stay Informed: Subscribe Free to Infopackets, Today! Get your daily fix of Microsoft Windows news, reviews, tech tips, plus free software (freeware) goodies daily -- all absolutely free -- delivered straight to your email inbox! Bonus: join our website today and you'll also receive our highly coveted Top 10 Tech Reports, including: Top 10 PC Security Essentials, Windows Optimization Secrets, Top Freeware Antivirus, MS Office alternatives and more. Don't delay: subscribe today! Click here for more info.
Infopackets Game of the Week
Secrets of the Dark: Eclipse Mountain Collector's Edition
