Phishing Threat Heightens Courtesy New Tools
By CXOtoday Staff
Mumbai, May 8, 2008

The tools discovered by PandaLabs allow cyber-crooks to spoof bank pages and emails, online pay platforms, Gmail and Yahoo! Mail mail accounts, online games (Xbox password theft), and blogs (Fotolog access credentials).

Luis Corrons, technical director of PandaLabs, said, "Due to the simplicity of the tools, the number of phishing attacks increases, causing companies and consumers large losses. According to a study conducted by Gartner, phishing attacks caused U.S. consumers losses amounting to USD 3.2 billion in 2007."

These kits that come for free operate as follows: upon accessing a URL that contains the kits, users obtain the files to create a fraudulent mail; one file allows them to spoof mails of banks, pay platforms etc. The other allows them to create a fraudulent page that resembles the original. Additionally, the kit includes a PHP program, which is also free, to send emails from the spoofed page.

The rest of the process is similar to other phishing cases: the false email is sent to several mail addresses, with a link to a malicious page in which users are requested to enter the data cyber-crooks are after; email addresses, bank passwords, etc. Cyber-crooks can also choose the way in which to receive the stolen data; TXT files stored on a server, a message in their mailbox, etc.


Related Links:

"10% of phishing attacks are targeted at India"