| Phishers Exploit Banking Frames |
|
|
|
| Written by Editor |
| Thursday, 17 March 2005 15:55 |
|
In the case of the first attack, the phisher attempted to exploited a weakness in Charter One’s own site that allowed the displaying of an arbitrary URL within a frame on the site. The attack also used an SSL enabled site to house the fake page to ensure that no warnings where displayed. As a result, the fake page was shown within another page from the Charter One site, the page security padlock would give a false indication of the security of the page, as it would appear to most users that this is a legitimate Charter One page. The second attack used an iframe trick to inject arbitrary content into a page at www.charterone.com, making it very difficult to tell that anything is afoot. Jeremy Wagstaff who is technology columnist with Dow Jones writes about the second phishing attack in his blog here. |
| Last Updated ( Thursday, 14 September 2006 23:16 ) |













