Blog

Cyber-criminals can access free kits to aid them in launching phishing attacks, an online security resource has discovered.

The kits, discovered by PandaLabs, could allow the thieves to send out mass fraudulent emails mimicking bank web pages, online pay platforms and email accounts in order to trick people into handing over financial and personal data.

From the kit a criminal can access two files. One file allows the creation of spoof emails made to look like they have come from official sources and the other allows criminals to create mock-ups of genuine web pages.

The phishing attack takes place when the criminal spams internet users with the email, with a link to the fake web page. Users who follow the link will be asked to enter their personal data. Lists of email addresses can also be purchased from the internet.

Technical director of PandaLabs Luis Corrons said that the amazing thing was that the kits were free.

“Due to the simplicity of the tools, the number of phishing attacks increases, causing companies and consumers large losses,” said Mr Corrons.

Last week spam celebrated its 30th anniversary.

If you enjoyed this post, make sure you subscribe to my RSS feed!

Search engine providers need to be more transparent about how they utilise users’ data, a government initiative has said.

Get Safe Online, a joint initiative between the government and the Serious Organised Crime Agency, has said internet users should make a decision as to whether to remain with providers who use private information for things such as targeted advertising.

A report released this month by the European Union stated that search engines should not hold on to personal data for a period of more than six months. Google and Yahoo! currently carry a policy of rendering all users’ data anonymous after 18 months.

Managing director of Get Safe Online Tony Neate said: “It’s not always exactly transparent why they [search engine providers] need it [user data] so I’d like to see a bit more clarity in relation to the information that they hold and why.”

A June 2007 report by Privacy International said that Google demonstrated an “aggressive use of invasive or potentially invasive technologies”.

If you enjoyed this post, make sure you subscribe to my RSS feed!

A European advisory body has recommended that internet search engines should delete users’ personal data.

The European Commission’s Article 29 Data Protection Working Party report has told how search engines are unclear on their data protection policies and advised that all collected personal data should be deleted after six months, the BBC has reported.

The recommendation would mean that collected data could only be used for the purpose of searching.

If the commission accepts the request it could lead to conflict with popular American search engine companies.

Google and Yahoo! carry a policy of rendering all users’ data anonymous after a period of 18 months. MSN’s policy comes into action at 13 months.

In a statement Peter Fleischer of Google’s global privacy counsel said: ‘Google takes privacy incredibly seriously; protecting our users’ privacy is at the heart of all our products.’

Another obligation set out in the report was the obtainment of personal consent from users to allow their data to be uses in non-search services. It also asked search engines to give users clear information on the data they intended to collect.

If you enjoyed this post, make sure you subscribe to my RSS feed!

Hacking has become an increasingly professional operation, as cyber crime becomes ever more lucrative, a leading security expert has said.

Joe Telafici, vice president of operations for McAfee’s Avert Labs, told the BBC that there had been a clear trend in the last year towards malware designed to make money.

Instead of the debilitating effect of a shutdown or the irritant-style spam which might slow down a PC, Mr Telafici says attacks have become more focussed on theft.

“2007 was a fairly interesting year,” he commented, adding that an “eco-system” surrounding the solicitation of money from unsuspecting users had sprung up.

As well as criminals using the tools to try to scam money from users, security threats are being commercialised and offered on the open market, with those without the expertise to perform hacks now able to operate applications which do it for them.

The advent of new web-based applications such as social networking sites like Facebook and MySpace, which include a welter of personal data and opportunities for illicit access, has further muddied the waters for security analysts.

The sites, which soared in popularity in 2007, are expected to be a target for hackers this year.

If you enjoyed this post, make sure you subscribe to my RSS feed!