How Phishers Think, Act, and Make a Profit

whitehartstag writes with a write up of "the excellent session at Black Hat that detailed 'how phishers create sites, share info and code, and basically are lazy.' They store their stolen data 'on websites that they have hacked into, or on [publically available] sites like guestbooks. And even worse, they are not protecting their stolen data ... which means that all one needs to do to find this info is to reverse engineer a real phisher's website, look at their PHP script, and find out where they are storing the data.'"

Comments

Re:How is this useful for law-abiding citizens?

[AceofSpades19]

You can start phishing phishers and get your sweet sweet revenge

Hmm

[areusche]

Hackers hacking hackers? That's a mouthful! What's next? Bankers banking bankers?

Re:Hmm

[Eudial]

The next logical step would be hackers hacking hacker-hacking hackers.

Re:Hmm

[Mesa MIke]

Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo.

Re:Hmm

[Shajenko42]

Luckily, I have a Trace Buster-Buster-Buster.

Re:Hmm

[Clandestine_Blaze]

Oh yeah? Well I see your smelly Buffalo, and raise you a James while John had had had had had had had had had had had a better effect on the teacher

I wish I knew about this while I was in high school and had to write boring 500 word essays. A few of these and I would be nearly done! :D

Hey!

[Vectronic]

"...[Phishers] basically are lazy"

I'm lazy, maybe I could be a phisher king...

"...all one needs to do to find this info is to reverse engineer a real phisher's website, look at their PHP script..."

Shit, I instrinsically fail.

The Phisher Job Description

[Nymz]

...does involve 'securing' data, just not in the way you think it does.

Old Hat

[Pandare]

This article is an old Trope. In fact, Confucius once said: "Give a man a fish, he eats once. Teach a man to phish and he gets a post in /."

Re:Old Hat

[Anonymous Coward]

Confucius say:

There is black hat and white hat, but your sig is just old hat.

Re:Old Hat

[Yvan256]

Give a man fire and he'll be warm for a day. Set him on fire and he'll be warm for the rest of his life.

Re:Old Hat

[Darkness404]

But give a man Ramen Noodles and you don't have to teach him anything.

Re:Google

[ya really]

Let me get you started, 4111 1111 1111 1111. It even passes the mod 10 check!!

The law will protect us!

[Jah-Wren Ryel]

And even worse, they are not protecting their stolen data

Clearly, the answer is to pass a law requiring that phishers disclose all breaches of the personal data they have collected. That will undoubtly shame them into increasing their security to better protect our personal information.

And even worse

[narcberry]

...they aren't protecting it? The fact that my personal information is in the hands of people with intentions of using it, is not as bad as them not protecting it? I'd hate to imagine the kinds of people that might get their hands on my personal information!

Re:One time...

[Anonymous Coward]

"even who-is'd him for them in the e-mail (it appeared to be an Indian name).... I called the number on the ad... He had a thick Indian accent. Same guy? Coincidence?"

No way that was a coincidence. I mean, how many Indians are there?

You know, this one time...

[patio11]

... I saw two white guys in a day. And was like, whoa -- are you folks following me?

Then I saw another one. I knew it. Never trust white guys.

-- A white guy (but just because I'm paranoid doesn't mean I'm not out to get me!)

Re:first post

[Anonymous Coward]

Yeah, there's something wrong with the world when the trolls are more interesting than the on-topic posts.

How Phishers Think, Act, and Make a Profit:

[Conanymous Award]

1. Hmmm, I want me some profit
2. Somebody set up us the phishing website
3. ???
4. Profit!

Re:One time...

[LMacG]

> Because obviously everyone has to nick-pick every fact...

Umm, yeah, that would be "nit-pick".