(Update: corrected a few things. You can’t see the person’s bank account number. But you can see anyone’s phone bill, whether or not they’re a customer of that bank.) — Here’s a hole in Internet banking that allows anyone with an account at a bank to look up other customers’ people’s bills–tax, water bill, Internet… Read More »
Further to my earlier piece about the scamming potential of Web 2.0, here are a couple more examples of why social engineering is a bigger problem than it might appear. First off, governments and organisations are not as careful with your information as you might expect them to. There are plenty of examples of CD-ROMs… Read More »
It’s somewhat scary that more than 10 employees of a laboratory that works on security issues (including phishing) could fall for a phishing attack. The Oak Ridge National Laboratory, or ORNL, managed for the U.S. Department of Energy by UT-Battelle, works on science and technology involved in energy production and national security. In late October… Read More »
A few weeks back I wrote about love scams (“You Give Love a Bad Name,” WSJ.com) — how scammers are trawling online dating sites looking for suckers. What interested me about the scam is that in some cases the scammers play a very patient game — luring the mark in over a period of months… Read More »
Good grammar is important, whether you’re pitching a story to a journalist or a scam to a dupe. Here are two examples: how not to and how to. First off, a PR pitch that endangers its credibility with an error in the subject line: And now, here’s an example of getting it right: A scam that not only… Read More »