Phishing for Credit

An anonymous reader writes "Two graduate students at Indiana University conducted a phishing study to determine how readily students will give up personal information if the phishing emails appear to come from close friends. Using only publicly available information, they sent out emails to students asking them to click a link that required username/password information. Needless to say, the study has generated lots of attention on campus. The student newspaper has the story and the researchers have created a blog where the participants can vent."

Comments

Dear Friend

[fembots]

Dear Friend,

Can you please click on this link?

Yours Truly Friendly,
Close Friend

Your slashdot session has expired

[Anonymous Coward]

please reply to this message with the following information:

Nickname:
Password:

Heh

[Otter]

[T]he researchers have created a blog where the participants can vent.

This would make a nice change from the usual celebrity-in-trouble "apologies", where they go on the Tonight Show, bite their lips and look downcast and assure us "I'm very, deeply, truly sorry..."

Instead we can get, "Jay, I have created a blog where people can vent."

Study extension

[Rosco P. Coltrane]

Two graduate students at Indiana University conducted a phishing study to determine how readily students will give up personal information

After such a successful research on phishing, our two friends have decided to tackle a new study: test how much load e-commerce sites can handle, and how much money ATMs can usually deliver on any given day.

Too easy?

[stinky wizzleteats]

I notice that a lot of the complainants have posted their e-mail addresses in the blog to try to get together to organize action...

Dear concerned student:
I am a close friend writing to you about your recent experience with a phishing study in which deception was used. I have met with an attorney on this issue who is interested in pursuing a class action lawsuit on behalf of the victims of this study. To participate, please click the link below and provide the following personal information...