Inside the Password-Stealing Business: the Who and How of Identity Theft

[Howell, Paul]

At
http://www.mcafee.com/us/local_content/reports/6622rpt_password_stealers
_0709_en.pdf

With shopping and banking transactions occurring primarily online today,
password stealing has become
a common cybercrime. Whatever the vector of attack, in many cases some
sort of password-stealing
malware makes its way onto victims' computers.

The criminal organizations behind the circulation of malicious software
often operate from countries
such as Russia, China, or Brazil; and their sole interest is obtaining
user credentials and turning these
into cash. In times of economic uncertainty, stolen credentials are
becoming even more valuable than
ever, so protecting your privacy and identity is paramount.

This report outlines contemporary attack techniques used in the most
advanced and prevalent password stealing malware families, it explains
the tricks of the trade (such as on-screen keyboards) used to attack
banks latest security mechanisms, and it dissects a new target of
password-stealing behavior-massive multiplayer online role-playing games
(MMORPG).

[...]

------------------------------------------------------------------------
To unsubscribe from netsec, send mail to majordomo@merit.edu
with a body consisting of the words "unsubscribe netsec" --
without the quotes. For more help, send a message to majordomo@merit.edu
with the word "help" as the body.
------------------------------------------------------------------------