Wednesday, June 30, 2004

Law firm is an identity theft victim

A Westchester-based law firm was ripped off of its identity by a paralegal, reports MSN.

"...if identity theft involving individuals is our fastest-growing crime it was just a matter of time before we saw identity theft of corporations."

3 charged in NJ identity theft plot

The Jersey Journal reported that 3 people have been charged in an identity theft plot. The victims were shoppers at the Ethan Allen furniture store. Their store credit card applications were stolen by an employee.

Tuesday, June 29, 2004

Banks say, "Phishing Season is Over" : Identrus SimpleSign

Brian Livingston writes on Identrus, SimpleSign, and Phishing.

Identity Theft Management Software

Innovative Software Solutions launches Identify Theft Management Software.

Monday, June 28, 2004

Sender Authentication - Solution to Phishing Problem

Techweb writes about sender authentication as a solution for Phishing.

"Multiple sender authentication specifications have been proposed, including Sender ID, a blend of Microsoft's former Caller ID for E-mail and the more popular Sender Policy Framework (SPF) which was submitted to the IETF last week, and Yahoo's competing DomainKeys."

Sender Authentication - Solution to Phishing Problem

Techweb writes about sender authentication as a solution for Phishing.

"Multiple sender authentication specifications have been proposed, including Sender ID, a blend of Microsoft's former Caller ID for E-mail and the more popular Sender Policy Framework (SPF) which was submitted to the ITEF last week, and Yahoo's competing DomainKeys."

Verisign's Email Security Service

Verisign announced their email security service to address email spam, viruses, and other attacks. The service uses filtering, authentication and accreditation. It will rely on it SSL issuance process to verify the authenticity of a domain from which an email scam originates.

Congress Passes Identity Theft Bill

Rep. John Carter's (R-Round Rock, TX) Identity Theft Bill was passed by the Congress, and is awaiting the President's signature.

Congress Passes Identity Theft Bill

Rep. John Carter's (R-Roud Rock, TX) Identity Theft Bill was passed by the Congress, and is awaiting the President's signature.

Friday, June 25, 2004

Phishing attacks level off...

APWG reports that phishing attacks have leveled off for the month of May 2004.

Phishing attacks level off...

APWG reports that phishing attacks have leveled off for the month of May 2004.

Thursday, June 24, 2004

2 wanted in identity theft case

Oregonlive.com reports that there are two people sought in multiple identity theft cases in the Portland-Vancouver area.

Fake ID on the Internet

BBC reports on how one can openly buy/sell fake ID cards on the Internet.

"With these cards and qualification papers, a person could be virtually anybody", Ruth Taylor, Trading Standards

Child Identity Theft

Kim Roberts of The Courier writes about child identity theft and what parents should do.

"Protect your child’s social security number, only giving it out when necessary. Sports organizations have no need for such information", said Chief Marlin Price of the Southlake Police Department.

2 arrested for identity theft

"They don't necessarily have to reach into your pocket to steal your credit card ... as long as they get your identity there's any number of ways they can turn that into a profit," Salinas Police Lt. Steve Perryman said.

-- KSWB Channel reports

Tuesday, June 22, 2004

Mastercard and NameProtect partner to fight phishing

Mastercard and NameProtect have announced a partnership that would takedown phishing sites/tools on a realtime basis as and when they are introduced on the Internet.

Phishing flaw in Opera browser

Secunia notes a flaw in the Opera browser that would allow phishers to take advantage of the users through a UI attack.

BusinessWeek and NBC talk about phishing

BusinessWeek and NBC talk about phishing.

"Marketers will spend a whomping $1 billion this year compiling e-mail addresses, crafting online offers, and sending out messages they hope will trigger action and inspire loyalty in their customers."

Monday, June 21, 2004

Network Associates for sale!?

An alert that I received says Network Associates is up for buying by Microsoft.

Mastercard joins fight against phishing

Mastercard announced today their intentions to tackle phishing and other online fraud. The MasterCard Global Risk Management Symposium will gather more than 300 elite professionals from several industries to have a series of meetings/workshops.

Feds, BBB, and Visa to provide phishing education to consumers

Icons reports on a government-private sector coalition that aims to educate consumers on phishing scams.

Isn't this the second coalition announced since last week's announcement of 'Trusted Electronic Communications Forum'? As long as these coalitions and forums cooperate, things should go in the right direction.

Ukraine reports...

It is particularly interesting since it comes from the region that the solution providers believe is the origins of phishing emails in most cases. See Computer Crime Research Center's article.

I do tend to agree with this comment thats at the end of the report:

"I'm still continually surprised at how much people believe the stuff that comes into their e-mail inbox," he said. Even when warned that giving out personal information and financial data is dangerous, people will still do it, he added.
"Not to be too insulting to my fellow Internet users, but these types of models like phishing depend on people not being smart," Movina said. "And they're working. It's like the P.T. Barnum business model, with a sucker born every minute."

It's Accentures contract

Silicon reports on Accenture's winning the contract for homeland security.

I still do not see the controversy here. If there is a problem, then it is not because Accenture's parent company is in Bermuda, but because the policies and legislations that possiibly allowed the company to base itself out of Bermuda!

Compliance, Outsourcing, and Phishing

Compliance to S-OX and other regulations, Security in Outsourcing, and Phishing are the top concerns. See Ellen Messmer reporting.