Phishing - attacks and countermeasures
Posted on June 17, 2007 - Filed Under Phishing, Security Management | Leave a Comment
What is Phishing?
Phishing is the art of stealing the idnetity of an individual and obtaining confidential information by the attacker. Surveys and studies reveals that the direct financial loss due to phishing attacks accounted for 1.2 billion in 2003 and is increasing day-by-day. The indirect loss is many times higher than the direct loss.
The [...]
Drive-By Pharming
Posted on March 8, 2007 - Filed Under Access Control, Phishing | Leave a Comment
Sid Stamm, Zulfikar Ramzan, and Markus Jakobsson have identified a clever, and potentially devastating, attack against home/wireless routers.
How does the attack works?
Attacker creates a webpage with containing the malicious Javascript code.
Victim visits the page
The code makes a login attempts into the users home broadband router and then attempts to change its DNS server settings to [...]