AplusWebMaster
Topic Starter
FYI…
- http://preview.tinyurl.com/2xx67b
July 12, 2007 - (Symantec) - "…Symantec has detected a number of phishing sites that have been hosted on government URLs. In June alone, phishing sites were identified on government sites from the following countries: Thailand (.go.th), Indonesia (.go.id), Hungary (.gov.hu), Bangladesh (.gov.bd), Argentina (.gov.ar), Sri Lanka (.gov.lk), Ukraine (.gov.ua), China (.gov.cn), Brazil (.gov.br), Bosnia and Herzegovina (.gov.ba), Columbia (.gov.co), and Malaysia (.gov.my). This might come as a surprise to some people, as governments are thought to have very secure computer systems. However, the quantity of phishing sites hosted on government domains around the world seems to suggest otherwise. These fraudulent sites look like legitimate Web sites and are designed to trick users into divulging personal information such as government-issued identity numbers, bank password, or credit card numbers. Most phishing sites are placed on government Web servers by hackers who have gained access to the server through a backdoor, a vulnerable Web interface, or some other means. Hosting a phishing Web page on a government site has a number of advantages for a phisher. Government Web sites often receive a high volume of traffic, so their servers can handle the extra traffic generated by a phishing site. This extra traffic might not be noticed immediately, giving the phishing site a longer lifespan before it is detected and shut down. Perhaps most importantly, hosting a phishing site on an actual government URL gives the phishing site a sense of authenticity that’s hard to beat."
- http://preview.tinyurl.com/2xx67b
July 12, 2007 - (Symantec) - "…Symantec has detected a number of phishing sites that have been hosted on government URLs. In June alone, phishing sites were identified on government sites from the following countries: Thailand (.go.th), Indonesia (.go.id), Hungary (.gov.hu), Bangladesh (.gov.bd), Argentina (.gov.ar), Sri Lanka (.gov.lk), Ukraine (.gov.ua), China (.gov.cn), Brazil (.gov.br), Bosnia and Herzegovina (.gov.ba), Columbia (.gov.co), and Malaysia (.gov.my). This might come as a surprise to some people, as governments are thought to have very secure computer systems. However, the quantity of phishing sites hosted on government domains around the world seems to suggest otherwise. These fraudulent sites look like legitimate Web sites and are designed to trick users into divulging personal information such as government-issued identity numbers, bank password, or credit card numbers. Most phishing sites are placed on government Web servers by hackers who have gained access to the server through a backdoor, a vulnerable Web interface, or some other means. Hosting a phishing Web page on a government site has a number of advantages for a phisher. Government Web sites often receive a high volume of traffic, so their servers can handle the extra traffic generated by a phishing site. This extra traffic might not be noticed immediately, giving the phishing site a longer lifespan before it is detected and shut down. Perhaps most importantly, hosting a phishing site on an actual government URL gives the phishing site a sense of authenticity that’s hard to beat."