Phishing For Bank Info Without Any Pesky Malware

Emb3rz writes "DarkReading.com brings us news of a new approach to phishing that targets online banking sites. Here's the novel part of it: it doesn't involve any of the typical attack vectors we all know and love. Instead, it uses JavaScript from a remote page to detect if you have a banking site open, and prompts you for info via popup if you do."

Comments

Re:The Best Defense is Offense

[Gerzel]

4. Find out that the phisers are using a proxy to bounce off of.
5. Find that proxy is some poor schmuck who got hacked.
6. Realize poor schmuck is you.
7. Boom.

Re:The Best Defense is Offense

[ushering05401]

There's a simple technical solution to this:

      1. trace the phishing to their location
      2. send a missile to that location
      3. problem solved

I don't get it. Then the bad guys would have a missile. That is worse, not better.

Re:paranoia-plus...

[eat here_get gas]

because most bank robbery's do not occur in tooling shops.

dieing indeed....