Security Blog
September 16, 2009
A New Way of Phishing - Chat-in-the-Middle
The RSA FraudAction Research Lab has recently discovered a new type of phishing attack that targets online banking customers (e.g. me and you). While past phishing attacks simply look for the victim to enter in their online banking credentials, this one does not stop there.
After the victim is tricked into entering their login credientials (usually at this point, entering in their login credentials, the victims are redirected to the phishing Web site or to the real bank Web site.), the attacker goes one step further by initiating an online live chat session. During this live chat, the attacker attempts to extort even more information from the victim through social engineering (phone numbers, addresses...etc).
Attackers are always finding new and creative ways to obtain sensitive information. You can never be too sure. My best advice is: When in doubt, go to your local branch.
Posted by: Pete at 10:31 PM
Categories: General , Phishing
No TrackBacks
TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/44
