邪恶八进制信息安全团队技术讨论组's Archiver

sunwear 2005-11-23 00:15

[转载]Distributed Phishing Attacks(钓鱼式攻击)

信息来源:邪恶八进制信息安全团队([url]http://www.eviloctal.com/[/url])

We identify and describe a new type of phishing attack that circumvents what is probably today’s most efficient defense mechanism in the war against phishing, namely the shutting down of sites run by the phisher. This attack is carried out using what we call a distributed phishing attack (DPA). The attack works by a per-victim personalization of the location of sites collecting credentials and a covert transmission of credentials to a hidden coordination center run by the phisher. We show how our attack can be simply and efficiently implemented and how it can increase the success rate of attacks while at the same time concealing the tracks of the phisher. We briefly describe a technique that may be helpful to combat DPAs.

页: [1]
© 1999-2008 EvilOctal Security Team