by Andrew LaVallee, Reporter, The Wall Street Journal
Phishing attacks that affected customers of Microsoft’s Hotmail Monday have compromised more than 30,000 email accounts, including those of Gmail, Yahoo Mail and other services.
Microsoft blamed phishing, in which cybercriminals try to trick consumers into revealing personal information through fraudulent emails, for a list of Hotmail account passwords that appeared online.
by Nick Wingfield, Reporter, The Wall Street Journal
Microsoft says a phishing scheme is behind the exposure of passwords to thousands of Hotmail accounts late last week and adds that it’s helping affected customers regain control of their accounts.
On Monday, the Neowin technology blog posted a story saying that an anonymous user on Oct. 1 had uploaded a list with password details of more than 10,000 Hotmail accounts to a Web site called pastebin.com, where developers typically share programming code with each other.
by Marisa Taylor, Blogger, Digits, The Wall Street Journal
The latest phishing scam on Facebook has raised the question yet again as to whether the social-networking site is dropping the ball on security measures and properly responding to privacy complaints.
Facebook faced consumer fraud charges in 2007 for allegedly responding too slowly to user complaints about harassment, pornography or nudity from the social-networking site. The probe into the company’s safety procedures by New York state Attorney General Andrew Cuomo resulted in a settlement requirement that Facebook respond to such complaints within 24 hours.
You might be familiar with phishing attacks, those messages sent by criminals that look like they’re from a bank or Nigerian prince. But what about Twishing?
The term may enter the tech lexicon this week, thanks to an attack targeting the Web site Twitter, which runs a popular service that lets people share short updates about what they’re doing.
Newsweek is reporting that computer networks of both the Obama and McCain campaigns were the targets of a sophisticated cyberattack in the run-up to the general election and, in the Obama case, “a serious amount of files” were downloaded from the system.
Computer security professionals say many net forums are populated by teenagers swapping credit card numbers, phishing kits and hacking tips. The poor technical skills of many young hackers means they are very likely to get caught and arrested, they say.
by Ben Worthen, Blogger, Business Technology, The Wall Street Journal
Here’s the latest sign that businesses are losing the tech security fight: The bad guys are starting to steal from one another.
That could sound like a good thing–better that hackers and other cyber criminals squabble amongst themselves than attack innocent businesses and consumers–but it really isn’t.
Of all the methods scammers use when hunting for victims, phishing is one of the most difficult to guard against. Phishing attacks are designed to exploit societal vulnerabilities more than technical flaws, and, in some cases, are extremely difficult to block. Even the best anti-malware software suite can’t stop an end user from willingly revealing personal information, particularly if the Web site being used to collect the data doesn’t trip any high-alert security alarms.
The Federal Trade Commission has taken an interest in educating consumers on the dangers of phishing. To that end, the government organization has prepared three separate 60-second videos on the ways and scenarios a consumer might possibly encounter a phisher.
This is a section of the All Things Digital Web site featuring posts from around the Web, from other Dow Jones properties and also original pieces we solicit. The section is now explicitly labeled that it comes "from other Web sites."
We are fully aware of the controversies around how linking and aggregating is done on the Web and we, in no way, are attempting to "scrape" original content created by others. Instead, regarding third-party posts, we are trying to point readers of this site to other posts from around the Web that we admire and are trying to do so in the quickest manner possible.
The Internet is full of terrific content that is not ours and we want to help our readers find it by making editorial suggestions--Look, Mom, no algorithm!--of posts we think are worth their time.
That is why we have made even more changes to Voices to ensure we do this in the most transparent and timely way. While we don't expect that everyone will agree with our policies, we have made changes that reflect our intent in pointing to content outside our site.
Because the site is wholly owned by Dow Jones, publisher of The Wall Street Journal, we aim to adhere to the journalistic standards of the best of the mainstream media. But, because it is run autonomously as a small online startup, we aim to exhibit the fresh thinking and nimbleness of the best of the new media. We want to be first, and sassy, but also well sourced and accurate. We will offer lots of opinion and analysis, but plenty of fact as well.