Click here to receive your FREE subscription to Campus Technology
Opinion
Phishing for Mules
10/12/2007
We all know, or should know, about phishing, a fraudulent attempt, frequently through legitimate looking e-mail requests, to obtain personal information such as a credit card number, a social security number, or a bank account number and PIN. The following is one that I received the other day.Warning NotificationAs incredible as it sounds, people respond to e-mails like this. A recent Harvard study found that 90 percent of the phishing recipients don't recognize a well constructed phish. What I found even more surprising was that neither education, age, sex, previous experience, nor hours of computer use showed a statistically significant correlation with vunerability to phishing.
It has come to our attention that your Community National Bank account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.
However, failure to update your records will result in account suspension. Please update your records before: Sunday, [October 14, 2007].
Once you have updated your account records, your account activity will not be interrupted and will continue as normal.
Click here to update your account information
The real problem for the phisher isn't getting the information; it's how to convert ill-gotten information into cold cash. One way is to simply sell the information on the black market where the going price for a credit card number is around $1. That is what apparently happened to some of the 47.5 million plus credit card numbers stolen from TJX several years ago. More information raises the value. A card with a three-digit code brings around $5. while additional security information such as a mother's maiden name can raise the value another $10. A working PIN can drive the price to more than $100.
In any case, at some point the stolen information needs to be translated into cash or merchandise that can be resold. In March of this year a Florida gang was charged with using credit card numbers from the TJX theft to steal $8 million in small transactions at stores in Florida.
The fact that they were caught underscores the phisher's problem. It is hard to make serious money without being noticed--and being caught and sent to jail. (In Florida it was a Wal-Mart clerk in Gainesville who became suspicious of multiple gift-card purchases that led to a review of store surveillance tapes.)
To take full advantage of stolen information, the crook, who is frequently operating from a foreign country, needs "mules." A mule is someone, preferably in the same country as the victim, to handle money transfers or ship items to the phisher. The more tenuous the money trail, the more likely it is that crook can get away with it. I made up the following narrative, but it is based on real events.
Recommended Reading
- Tufts Grants Rights for Mileage-Increasing Transportation Technology to Electric Truck
Tufts University has optioned rights to a technology that can recharge the batteries of any hybrid electric and electric-powered vehicle while it is driven. The Tufts-developed technology could increase by 20 percent to 70 percent the miles per gallon or total driving range performance of vehicles like the Honda Civic, Ford Escape, and Toyota Prius hybrids and the Tesla Motors and Phoenix Motorcars electric vehicles.
- U Florida and Cyntellect Collaborate to Unlock Mysteries of Cancer Stem Cells
The University of Florida has entered into a research agreement with life sciences company Cyntellect. The university's Interdisciplinary Center for Biotechnology Research will work with the company to focus on a variety of research areas including the purification and analysis of cancer stem cells (CSCs), rare cells believed to be directly involved in propagating cancers.
- George Mason U Receives Grant To Deploy Intergraph Apps for Intelligence Curriculum
George Mason University (GMU) in Fairfax, VA has been awarded a grant from Intergraph to enable students enrolled in GMU's Geospatial Intelligence Graduate Certificate program to use the company's geospatial production and exploitation software as part of their core curriculum.
- Institute for Cyber Security at U Texas, San Antonio Opens Incubator
The University of Texas at San Antonio (UTSA) Institute for Cyber Security (ICS) has launched a new Internet security incubator. The incubator was developed to commercialize promising technologies that address major cyber security and privacy issues. The first companies to enter the incubator are Denim Labs and SafeMashups.
- ISO/IEC Publishes Office Open XML Standard
ISO/IEC has published the Office Open XML (OOXML) file format standard, formally known as ISO/IEC 29500:2008. It describes file formats originally designed by Microsoft for its Office 2007 productivity suite, which are used in presentation, spreadsheet and word processing applications.
- Dynamics NAV 2009 ERP Coming Next Month
Microsoft exec Kirill Tatarinov Wednesday described some new features to expect in the forthcoming Microsoft Dynamics NAV 2009 enterprise resource planning solution. He gave the keynote address at Microsoft's Convergence 2008 event in Copenhagen, Denmark.
