'Phishers crack token-based security'

* Privacy * Security * Surveillance * Blog * 4551

• Local Services

Robert McMillan (NewsMaster) -

Over the past few weeks, approximately 35 phishing Web sites have been set up that use the new attack. They attempt to trick users into divulging the temporary passwords created by the security token devices used by banks such as Citigroup, said Rich Miller, an analyst with Internet research company Netcraft.

Phishers have only recently begun looking for ways around token authentication, using what is known as a "man-in-the-middle" attack, Miller said. "These attacks are worrisome because they took advantage, fairly early on, of a system that's seen as enhancing security for banking customers," he said.

Follow the link to read the full story. Comment on it here.

Comment #1 imaginarydivabc from vancouver, bc -

I run an ebay store and these phishers are driving me up the wall! And the latest phishing emails that I've been receiving are these complaint emails saying they never received their product. When will they ever end?

Comment #2 Sweetness from Earth, the Universe -

Unfortunately for Joe/Jane Public this phishing will never end. The reason I say that is because it has proven profitable. These people are willing to go through 1, 000 people just to get one bite. But the odds are that they are getting bites from about 2 in each 300.

It's amazing how few people question authority or authority figures. Unfortunately for them a lot live in countries where they can't question authority so they have become attuned to having questions asked and if you don't answer them then you get in trouble with the law or the government.

So they see something like this and they fall for it hook, line and sinker. Also people in North America and modern countries around the world have suckers born every minute and that's what the phisher's count on.

Comment #3 Milly from Wisconsin -

Yes sweetness that is true. I get these emails all the time and love to respond to them! Well at least they got one bad apple. 1 down 3 million to go!

Comment #4 itsmrsjonesy from * -

I get these emails all the time also, especially ones that show a purchase from ebay. I receive a fake paypal notice showing where I paid a seller x amount of dollars, and there is the link to click if I didnt authorize the payment. I am so tired of those things!

Comment #5 Destiny (63.176.159.83) -

I'm not sure if I know what these emails or websites look like.

E-Mail:         

Name:            (required)

Title:           (required)

Message (do not enter emails or links or urls in the message!):