[15780] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Using crypto against Phishing, Spoofing and Spamming...

daemon@ATHENA.MIT.EDU (John Levine)
Sun Jul 18 11:22:55 2004

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: John Levine <johnl@iecc.com>
To: cryptography@metzdowd.com
Date: 17 Jul 2004 22:50:01 -0000
From: John Levine <johnl@iecc.com>
To: cryptography@metzdowd.com
In-Reply-To: <87vfgv4xpw.fsf@deneb.enyo.de>

>But is it so harmful?  How much money is lost in a typical phishing
>attack against a large US bank, or PayPal?

A lot.  According to people at the anti-phishing conference earlier
this year, six-figure losses are common, and seven-figure not unknown.

The kind of phishes we all see, trolling for credit card or ISP
account info with spam, are the lowest level kind.  The serious ones
carefully choose their targets, e.g., ebay sellers with very high
positive ratings, or people who live outside the US and have large US
bank accounts, and are more likely to send hundreds of messages than
millions.

Regards,
John Levine, johnl@iecc.com, Primary Perpetrator of "The Internet for Dummies",
Information Superhighwayman wanna-be, http://www.johnlevine.com, Mayor
"A book is a sneeze." - E.B. White, on the writing of Charlotte's Web

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post