January 01, 2007 — CSO — Indiana University researchers conducted an experiment—after getting approval that it was ethical—in which they targeted eBay users with a phishing attack. The researchers, Markus Jakobsson and Jacob Ratkiewicz, thought of this as "spear phishing" because of its targeted nature, rather than the typical spamlike attempts to fool end users. The researchers had a success rate of up to 14 percent per attack per year, compared with previous estimates that phishing yields a 3 percent success rate. "We think spear phishing attacks will become more prevalent as phishers are more able to harvest publicly available information to personalize each attack," Ratkiewicz said.
Other stories by Scott Berinato
$firstKeyword
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



