A New Tool for the Phishermen
This is not good:
RSA Catches Financial Phishing Kit
January 10, 2007RSA, The Security Division of EMC, announced Jan. 10 that it has identified a new phishing kit that was being sold and used online by hackers to target users’ personal information in real time.
The phishing kit, known as a Universal Man-in-the-Middle Phishing Kit, is meant to help online hackers create attacks involving financial organizations by enabling the hacker to create a fake URL through a user-friendly online interface. The fraudulent URL communicates with the legitimate Web site of the targeted organization in real time.
The target receives a standard phishing e-mail, and if the target clicks on the link, he or she is sent to the fake URL. The target thinks that he or she is working with content from the legitimate Web site, but in fact, the fake URL allows hackers to access the targets’ personal information, RSA said.
Until this came out, phishers were forced to use web domain names that were similar to the target company’s official domain (e.g., paypal.org instead of paypal.com, gopayal.com instead of paypal.com). The tool described will rig the address bar to look like it has the correct official domain while the real domain operates in the background.
I may be wrong (tell me if I am), but the legit URL appearance, plus the communication with the legitimate web site described above (will it even snag the SSL seal and info? If yes, yikes), mean that the “brilliant” red-yellow-green-white address bar color-coding built into Internet Explorer 7 for the express purpose of flagging phishing sites will be useless against this new trick.
The advice never to click through from an e-mail that claims to be from a financial web site is more relevant than ever.









