4 ms·
>> Wessland says such attacks are impossible to pick up with basic spam-filtering technologies, noting that hackers will simply keep creating new fake domains f
by markbnj 11y ago
>> Wessland says such attacks are impossible to pick up with basic spam-filtering technologies, noting that hackers will simply keep creating new fake domains from which to send their targeted messages.
Haha, yes that's true: we still do not have the universal fraud detector and stupidity prevention algorithm. Seriously, this is not a system security problem. If you have high-level employees in the finance dept. of your company that will initiate a wire transfer on the basis of an unsigned, unencrypted email from an un-trusted domain, that is a policy/standards/personnel issue.
- superuser2 11y agoDoes any large company have any form of email encryption deployed? I'm pretty sure Serious Business is steadfast in laughing off GPG.
- markbnj 11y agoProbably not many, but simply acting on the authorization of any email, not to mention one that is not from the CEO's corporate account is astoundingly credulous behavior. It shouldn't actually _be_ astounding, I suppose, given the number of people who fall for online scams, but we're talking about people within a corporation who have the authority to move large amounts of money between accounts. So yeah, still astounding to me :).
- superuser2 11y agoThe scammer just forges the FROM header, so it would appear to be from a corporate account.