//
you're reading...
Security

Phishing tool constructs new sites in two seconds

From ComputerWorld:

July 10, 2007 (IDG News Service) — Software developers like to make installation of their programs simple and quick. So do hackers.

Analysts at RSA Security Inc. early last month spotted a single piece of PHP code that installs a phishing site on a compromised server in about two seconds, the vendor noted in its monthly online fraud report for June, released on Tuesday.

The code contains all of the HTML (Hypertext Markup Language) and graphics needed for the fraudulent Web site, which spoofed a financial institution that RSA did not name in the report. The “.exe” file automatically installs the code and graphics in the right directories, RSA said.

It means the hacker did not have to repeatedly access the compromised server to upload graphics or other code for the site, potentially reducing the chance of the computer’s security software or network software detecting something awry, RSA said.

“By using such kits, fraudsters will be able to further automate the process of hijacking servers and creating new phishing sites,” the report said.

It doesn’t bode well for combatting the problem of phishing, where hackers try to elicit passwords or financial information via lookalike Web sites.

Despite efforts to quickly shut sites down, phishing sites averaged a 3.8-day life span in May, according to the Anti-Phishing Working Group, which released its latest statistics on Sunday.

Advertisements

About princess of antiquity

Abbi Cabanding is a member of the Security Bloggers Network and had been blogging on information security since 2006. She is also a member of the Association for Computing Machinery. She studied Computer Science and Fine Arts at the University of the Philippines - Diliman.

Discussion

One thought on “Phishing tool constructs new sites in two seconds

  1. hehe comsay na comsay mga posts ah. i heard napublish article mo sa bulletin? or inq b? hehe anyways visit my site. puro pambata hehe

    Posted by maeryn | July 17, 2:58 pm, 2:58 pm

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Sin of Silence E-Book


SIN OF SILENCE:
THE STORIES OF OUR DAYS
download:
single-page view
two-page view

On Wordpress

  • 94,807 readers

Subscribe via FeedBurner

Enter your email address to receive notifications by email.

RSS Princess of Antiquity on Tumblr

  • An error has occurred; the feed is probably down. Try again later.

Creative Commons

Creative Commons License
Original content in this work is licensed under a Creative Commons License.
%d bloggers like this: