Phishing scams have grown up from the unsophisticated swindles of the past in which fake Nigerian princes e-mailed victims, who were told they would get a big windfall if they just provide their bank account number.
Even as authorities try to stamp out that con and other e-mail and online scams, scammers are getting more wily and finding new loopholes to exploit.
The vast majority of e-mail is spam and an unknown percentage of that is meant to defraud. The scale of electronic fraud means that the criminals can make huge profits even if only a small percentage of people are duped.
Phishing commonly refers to hoax e-mails purportedly from banks or other trustworthy sources that seek to trick recipients into revealing bank or credit card account numbers and passwords.
The US government scored a big victory in November when the Web hosting company McColo Corp was taken offline. Estimates vary, but the Washington Post said that 75 percent of spam worldwide had been sent through that single company.
But the spam e-mails offering celebrity diets, cheap printer ink, erased credit card debt and amazing orgasms found a new way to inboxes, according to Google’s security subsidiary Postini.
Now spammers use a variety of computers to send out spam e-mails to obscure their origins, meaning that a dramatic McColo-style takedown will be harder to reproduce, said Adam Swidler, product marketing manager for Google’s Postini.
And they’ve largely abandoned scams that are easy to see through — like the Nigerian prince — in favor of sophisticated “location-based spam,” which directs the victim to a Web site discussing a local disaster or similar issue. If they click on the offered video, the Web site downloads a virus to the user’s computer, Google said in a blog on security.
Tim Cranton, a Microsoft cybersecurity expert, said there was no way to know how much money is stolen.
“We don’t have a way to estimate numbers because there are so many victims that you’re not aware of,” he said.
E-con artists are getting more sophisticated in approaching potential victims. One tactic has been to write spam that purports to come from a trusted source, like Paypal.
When Paypal, which is owned by eBay, learned that spammers were using its name, they put a digital signature on their e-mails and asked providers like Yahoo and Google to block any e-mail purporting to come from them that did not have that signature.
“We know how many they throw away and it’s approximately speaking about 10 million a month,” said Michael Barrett, Paypal’s chief information security officer. “If the consumer never sees the e-mail in the first place then it’s hard for them to get victimized.”
“Phishing was not just impacting consumers, in terms of general loss, it was impacting their view of the safety of the Internet and … indirectly damaging our brand,” he said.
Security experts say they are seeing more and more shifts from outright fraud, where the victim will hand over their money, to the use of malware, basically malicious software that, among other things, collects passwords and credit card numbers for thieves.
“Those will then be sold on the underground market,” said David Marcus, a threat research expert at McAfee computer security firm.
The person purchasing the passwords and card numbers will use that information to make purchases, get cash or create fake identities. The Federal Bureau of Investigation, working with police in the UK, Turkey and Germany, shut down one such online forum called Dark Market last October that, at its peak, had more than 2,500 registered members, the FBI said at the time.
But experts agreed that they didn’t expect the problem to go away anytime soon and that more people out of work could mean more people falling for scams.
Marcus said many of the scams were nothing more than the digital equivalent of confidence tricks, although on a massive scale that could net some scammers more than US$100,000 a month.
“These things only have to be 2 percent successful,” he said. “Those campaigns are sent out to tens of millions of people at the same time.”
Also See: The GhostNet in the machine
ROLLER-COASTER RIDE: More than five earthquakes ranging from magnitude 4.4 to 5.5 on the Richter scale shook eastern Taiwan in rapid succession yesterday afternoon Back-to-back weather fronts are forecast to hit Taiwan this week, resulting in rain across the nation in the coming days, the Central Weather Administration said yesterday, as it also warned residents in mountainous regions to be wary of landslides and rockfalls. As the first front approached, sporadic rainfall began in central and northern parts of Taiwan yesterday, the agency said, adding that rain is forecast to intensify in those regions today, while brief showers would also affect other parts of the nation. A second weather system is forecast to arrive on Thursday, bringing additional rain to the whole nation until Sunday, it
LANDSLIDES POSSIBLE: The agency advised the public to avoid visiting mountainous regions due to more expected aftershocks and rainfall from a series of weather fronts A series of earthquakes over the past few days were likely aftershocks of the April 3 earthquake in Hualien County, with further aftershocks to be expected for up to a year, the Central Weather Administration (CWA) said yesterday. Based on the nation’s experience after the quake on Sept. 21, 1999, more aftershocks are possible over the next six months to a year, the agency said. A total of 103 earthquakes of magnitude 4 on the local magnitude scale or higher hit Hualien County from 5:08pm on Monday to 10:27am yesterday, with 27 of them exceeding magnitude 5. They included two, of magnitude
CONDITIONAL: The PRC imposes secret requirements that the funding it provides cannot be spent in states with diplomatic relations with Taiwan, Emma Reilly said China has been bribing UN officials to obtain “special benefits” and to block funding from countries that have diplomatic ties with Taiwan, a former UN employee told the British House of Commons on Tuesday. At a House of Commons Foreign Affairs Committee hearing into “international relations within the multilateral system,” former Office of the UN High Commissioner for Human Rights (OHCHR) employee Emma Reilly said in a written statement that “Beijing paid bribes to the two successive Presidents of the [UN] General Assembly” during the two-year negotiation of the Sustainable Development Goals. Another way China exercises influence within the UN Secretariat is
Taiwan’s first drag queen to compete on the internationally acclaimed RuPaul’s Drag Race, Nymphia Wind (妮妃雅), was on Friday crowned the “Next Drag Superstar.” Dressed in a sparkling banana dress, Nymphia Wind swept onto the stage for the final, and stole the show. “Taiwan this is for you,” she said right after show host RuPaul announced her as the winner. “To those who feel like they don’t belong, just remember to live fearlessly and to live their truth,” she said on stage. One of the frontrunners for the past 15 episodes, the 28-year-old breezed through to the final after weeks of showcasing her unique