Next Gen Phishing Improves on Simple Spam

An anonymous reader writes "ZDNet has a writeup about the next generation of phishing. According to the article, as anti-spam engines improve and user education levels increase, phishers will find it easier to hack into web servers and deliver password stealing trojans using browser vulnerabilities or Web 2.0 technologies than spam. Tom Chan from Messagelabs is quoted: 'They are trying to compromise poorly protected Web sites — they basically go in and enter their own code into that Web server,' said Chan, who explained that victims of this new phishing era would not have to do anything wrong in order to get hooked. 'You have gone to a legitimate Web site, you have not made a mistake and done everything right, but then your information gets compromised... because [the phishers] have taken over servers that belong to other people.'"

Comments

Huh?

[Klaidas]

You have gone to a legitimate Web site, you have not made a mistake and done everything right, but then your information gets compromised... because [the phishers] have taken over servers that belong to other people.

Wow, really? No kidding?? If someone takes over a server, your data can get compromised? o_O [/sarcasm]

Re:Even the well educated fall for it...

[Anonymous Coward]

I was always constantly amazed

My personal experience is that I'm either sometimes constantly amazed, or I'm always occasionally amazed.

Never fear, OSS is here.

[Anonymous Coward]

"They are trying to compromise poorly protected Web sites"

Fortunately as slashdot often reminds us. Apache is the number one server (over you know who), and the people who use Linux and Unix software are the most intelligent people on the planet (we're command line commandos).

Re:Inaccurate Term?

[Anonymous Coward]

In other news I have created a Next-Gen motorcycle that gets unlimited miles to the gallon, due to the addition of two levers that you operate with your feet that drive the rear wheel using a combination of chains and sprockets

Gallons of what exactly? If you can pedal indefinitely, you should enter the Tour de France, or maybe the Tour de Pulling Bad Analogies Out Of Your Ass

Re:Hacking into webservers and insertin malicous c

[techpawn]

Or just an average day at the NSA...

Re:Inaccurate Term?

[thewiz]

I think the new term would be "phucking" as that is what happens to the company and the customer.

Next Gen Phishing?

[MojoBox]

Sorry, but as a Nintendo fan, I can only accept New-Gen Phishing.

I like the new features!

[courtarro]

Quit being so negative. I like Slashdot's new PayPal monitoring service!

Re:Inaccurate Term?

[aplusjimages]

The author should have made a new buzzword for it, like "Fishing 2.0". By the way I am very interested in the next gen motorcycle that gets unlimited miles to the gallon. Do you have pictures and specs? This could revolutionize the world.

Re:Inaccurate Term?

[Fred_A]

The author should have made a new buzzword for it, like "Fishing 2.0".

I hereby propose pharming (to keep a logical progression of stupid buzzwords).