Use PKI to beat phishers
Internet scammers are increasingly casting around for financial information by "phishing" - using spam to deceive consumers into disclosing credit card numbers, bank account details and other sensitive information.
The e-mails purport to be from businesses with which the potential victims deal and advise recipients that they need to validate their billing information to keep their accounts active. Directed to a counterfeit website, they are hoodwinked into thinking they are responding to a bona fide request. Scammers then use this data to order goods and services or obtain credit illegally.
For bona fide e-commerce sites, this fraudulent activity increases concerns among customers, existing and potential. Paypal and eBay, both recently targeted by phishers, now warn customers to be on the lookout, advising that the only time they would request confirmation of account details is when customers log on.
by Colin Selfridge at Computer Weekly.
[ Read more ]
- Review: Understanding PKI: Concepts, Standards, and Deployment Considerations 2/e (23 January 2003)
Reading our newsletter every Monday will keep you up-to-date with security news.
Receive a daily digest of the latest security news.