Phishing

[grifscoots]

Don't these folk's ever give up? It didn't all paste, but they want you to click and sign in to confirm this order. As if.



http://images.paypal.com/en_US/i/logo/email_logo.gif (https://www.paypal.com/us)http://images.paypal.com/en_US/i/scr/pixel.gifhttp://images.paypal.com/en_US/i/scr/pixel.gifDear member,

This email confirms that you have paid orders@dell.com $699.99 USD using PayPal.

This credit card transaction will appear on your bill as "PAYPAL *DELL INC".


Payment Details


Purchased From:http://images.paypal.com/en_US/i/scr/pixel.gifDell.Inc
Item #Item TitleQuantity

[messenger13]

Yepperz...they're relentless. The easiest way foil them is to put a false username and password in their page. If it goes through, then you know that it's a fraud.

[UncleRock]

I ain't got the know how to send them a virus, or I would trash their systems.
Rock

[grifscoots]

I'd like to trash more than their systems!

[rixchard]

The reason they don't give up is because it works.

http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf

[dshealey]

The reason they don't give up is because it works.

http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf

A sad comment on the intelligence level in this country, but the real reason they keep doing it is because our goverment absolutely refuses to address it. States have tried, California had a pretty good law being proposed, but our fine federal government overrode any existing state laws, and prevented any new ones with their pathetic and innefective federal statute. Now we are saddled with a dead on arrival federal law that now prevents any state or local entity from doing anything better.

The fact that many, but certainly not all sources are offshore could be handled by blocking the offshore ISPs hosting them from connecting to the US network. That sounds hard, but I have seen more than one internet expert state that it could be done with pretty high effectiveness. Cable/phone line connections could be pretty well covered, but individual satellite connections not so well.

[astuber]

Playing the devil's advocate, how can state laws be expected to address an international problem?

This would seem to be a case of where we need to follow the money. We need make it more difficult to profit from the phishing attacks if we are going to reduce the number of attacks.

[dshealey]

Playing the devil's advocate, how can state laws be expected to address an international problem?

This would seem to be a case of where we need to follow the money. We need make it more difficult to profit from the phishing attacks if we are going to reduce the number of attacks.

No, not internationally, but if the states were allowed to do something like CA was trying to do, they could severely curtail or make untenable phishing or scamming actions by parties within in the USA.

My point is that we basically have no one looking out for us, since the federal government has botched it entirely, and in doing so made it practically impossible for state or local agencies to do anything to protect their constituents.

[astuber]

I may be mistaken, but there are already laws on the books that address the fraud issues inherent in these phishing sites. It would seem to make more sense to enforce the laws we already have rather than pass more laws that won't be enforced.

The US has banned online gambling sites for years with the only result being that the sites moved off shore. The recent legislation preventing credit card companies from handling payments to the gambling sites will at least have some short term effect until a work around is found.

I'm all in favor of limiting the power of the federal government, but a state law trying to address problems of this sort is merely politicians posturing for votes IMHO.

[omurphy]

i received an appearent email from paypal tonight for a $29 gucci key chain. i've used paypal but don't have an account. i don't know what to do with this. i called my credit card company and reported it but don't know if i should do anything else. any suggestions. omurphy

[gulfxray]

i received an appearent email from paypal tonight for a $29 gucci key chain. i've used paypal but don't have an account. i don't know what to do with this. i called my credit card company and reported it but don't know if i should do anything else. any suggestions. omurphy

when I have gotten stuff like that, I report it to PayPal as well... If anybody is going to do anything, it'll probably be them...