Study: &#39;Phishing&#39; scams net $500 million
19923
Most IT Managers won&#39;t question the importance of security, but this priority has been sliding between the third and fourth most important focus for companies.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
478927
Victims in Australia, Germany, and the U.S. are being targeted by a phishing scam that reveals their location using Google Maps.
418284
GADFLY ALREADY the internet age has given us 'phishing', when criminals use emails to persuade you to give them your bank details.  Now it seems we have the less crooked but nonetheless enraging online experience of 'philfing'  an acronym for 'purposely hiding what I'm looking for'.
349845
From a sharp increase in phishing scams to high-profile arrests, here's what made news this year.
236787
With consumers finally getting wise to phishing attacks, scammers are hitting the phones.The U.S. Federal Bureau of Investigation&#39;s Internet Crime Complaint Center (IC3) warned Thursday that so-called &quot;vishing&quot; attacks are on the rise. These are scams where criminals send an e-mail or text message to a victim, saying there has been a security problem and the victim needs to call his or her bank to reactivate a credit or debit card.&quot;Upon calling the telephone number, the recipient is greeted with &#39;Welcome to the bank of ...&#39; and then [is] requested to enter their card number in order to resolve a pending security issue,&quot; the IC3 said in its alert.In the past few years, inexpensive VoIP&#160;technology and open-source call-center software has made it inexpensive for scammers to set up phony call centers, paving the way for these new types of scams. Security experts say that vishing can be more effective than traditional phishing techniques -- which direct victims to fake Web sites -- because the voice-based attacks have not been as widely publicized.A new vishing scam involves sending text messages to cell phones, instructing victims to contact the fake online bank to renew their accounts, the IC3 said.Those who are unsure whether they have been targeted by this scam should look up the bank&#39;s phone number and call the bank directly, the IC3 advises.Operated in partnership with the FBI and the National White Collar Crime Center, the IC3 is a clearing house for Internet crime complaints.
28148
Online phishing schemes increased significantly in October as financial institutions struggled to combat attempts to steal private account information from online consumers, according to the Anti-Phishing Working Group (APWG).
749565
Phishing is a growing form of online fraud that blends old-fashioned confidence scams with innovations in technological trickery. In the second part of our two-part series, washingtonpost.com explores how banks, Internet service providers and other online businesses are trying to make e-commerce safe for their customers.-washingtonpost.com
419308
Security experts say phishing attacks becoming more sophisticated, and outnumber e-mails infected with malicous software.
230240
Hi-tech fraudsters have developed a new way of tricking customers who go online to do their banking, analysts warned yesterday. A &quot;Trojan horse&quot; programme insinuates itself into a user&#39;s computer via an email
318769
Fraud losses from email phishing attacks will hit $137m globally in 2004, according to a study from research and consulting firm TowerGroup.
704920
Do-it-yourself phishing kits are freely available on the Internet, a security firm said Thursday, and they will lead to more scams sent to online consumers.
731737
Apparently it&#39;s not just unwary individuals that fall victim to online scammers. Even large corporations, it seems, can get suckered into parting with their money by devious&#160;phishers.Case in point: Eden Prairie, MN.-based grocery chain Supervalu, which earlier this year got conned into depositing more than $10 million into two fraudulent bank accounts before recognizing the ruse. Details of the case are contained in court documents filed in connection with two forfeiture cases stemming from the incident.According to federal court filings in the U.S. District Court for the District of Idaho, the fraudulent activity took place in late February and early March this year. In the court filings, Stephen Kilgroff, Supervalu&#39;s vice president of legal affairs, said that on February 26 and 28 the company received two separate e-mails, one purporting to be from an employee at American Greetings Corp. and the second from an employee at Frito-Lay, both company-approved vendors.Both e-mails told Supervalu to send future payments for each vendor to new bank account numbers. In the case of the e-mail that purported to be from American Greetings Corp., Supervalu was advised to send payments to an HSBC account in Miami. The other e-mail advised Supervalu to send Frito-Lay payments to an account at First Security Bank in Rogers, Arkansas.Between Feb 28 and March 3, Supervalu deposited just over $6.5 million via multiple wire-transfers to the HSBC account, thinking that it was sending the money to American Greetings Corp. Similarly, on March 2 it made eight separate wire-transfers to the bank in Arkansas, depositing a total of $3.6 million to an account it thought belonged to Frito-Lay.In addition to the $6.5 million deposited by Supervalu into the HSBC account, an additional amount of $500,000 had been deposited into the same account by a second company, identified as &quot;ROHM&quot; on court documents. No information has been available concerning the second company, and it is not a party to subsequent litigation.Around March 6, according to the filings made by Kilgroff, Supervalu discovered that it had been &quot;induced&quot; into making the transfers to the bogus accounts. Following the discovery of the fraud, Supervalu quickly notified the appropriate law enforcement authorities, who managed to recover nearly all of the money before it could be withdrawn from the accounts.The recovered money is now being claimed by Frito-Lay, American Greetings and Supervalu. In making the claim to the recovered money, Frito-Lay said that it believes the money belongs to Supervalu and said supported that company&#39;s claim to ownership of the misdirected funds.&quot;However to the extent there is any determination that the ownership of these funds changed from Albertsons/Supervalu [the Albertsons grocery chain was recently acquired by Supervalu] to Frito-Lay (as a result of the attempted transfer, the misdirection, or any other development) Frito-Lay makes this claim to these funds in the alternative and subject to any claim of ownership by Albertsons/Supervalu&quot; the company said in an affidavit.A federal judge is expected to rule sometime in November on which firm should receive the recovered funds.A spokeswoman from Supervalu responded via e-mail to a request for comment. &quot;As indicated by the forfeiture complaint filed by the U.S. Attorney&#39;s Office in Boise, Supervalu was the target of attempted financial fraud,&quot; spokeswoman Haley Meyer said. &quot;Due to our internal controls and processes, we were able to quickly discover and report this to the FBI. As a result of the quick work of the Boise FBI Office and the U.S. Attorney, any funds lost are minimal.&quot;Computerworld is an InfoWorld affiliate.&#160;
438878
The rise in online scams has companies spending hefty sums to educate customers about fraud prevention and to address 'phishing' damage.
419543
InfoWorld - A vulnerability in Microsoft Internet Explorer (IE) browser could help fraudsters make phishing Web sites appear legitimate, a security researcher reported Wednesday.
535725
And Computer Associates too Tens of thousands of websites belonging to Fortune 500 corporations, state government agencies and schools have been infected with malicious code that attempts to engage in click fraud and steal online game credentials from people who visit the destinations, security researches say.â¦
267586
Security researchers have warned of a vulnerability in most web browsers that could let scammers launch phishing attacks from pop-up windows on trusted websites.