Phishing & BotNets
Re: Sitekey Phishing Jun 05 2006 11:36PM
skyler hushmail com (1 replies)
Re: Sitekey Phishing Jun 06 2006 06:45AM
Lance James (phishing securescience net)
skyler (at) hushmail (dot) com [email concealed] wrote:
> I do agree it doesn't stop phishing, it does help to prevent
> phishing because the amount of effort required is increazed, in
> this particular case, most people who enter this type of
> information can't remember which question they chose, so that only
> if they are asked the correct question are they willing to give an
> answer.
>
I guess, I wouldn't think it helps at all though, once the humans get
it, the phishers get it. It's in-band 2-factor, doesn't make sense.
> Skyler
>
>
> On Sun, 28 May 2006 10:29:14 -0700 Lance James
> <phishing (at) securescience (dot) net [email concealed]> wrote:
>
>> As we all know, Bank of America uses PassMark (now RSA's) Sitekey
>> image
>> technology. The trick is, if you don't know the image, or if you
>> look
>> suspicious you get a bunch of questions. Well included in the
>> recent
>> Bank of America phish I saw today, was the sitekey questionaire
>> sheet.
>>
>> I don't understand why adding another login credential to be
>> stolen ever
>> stopped phishing. My 2 cents.
>>
>> --
>> Best Regards,
>> Lance James
>> Secure Science Corporation
>> www.securescience.net
>> Author of 'Phishing Exposed'
>> http://securescience.net/home/news/phishingexposed.html
>> **********************************************
>> * New IntelliFound Service 2 weeks free *
>> * Real-Time Identity Surveillance Service *
>> * http://www.securescience.net/ *
>> **********************************************
>>
>
>
>
> Concerned about your privacy? Instantly send FREE secure email, no account required
> http://www.hushmail.com/send?l=480
>
> Get the best prices on SSL certificates from Hushmail
> https://www.hushssl.com?l=485
>
>
>

--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.net
Author of 'Phishing Exposed'
http://securescience.net/home/news/phishingexposed.html
**********************************************
* New IntelliFound Service 2 weeks free *
* Real-Time Identity Surveillance Service *
* http://www.securescience.net/ *
**********************************************

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus