3 ms·
Maybe I just didn’t see the attack vector clearly, but it appears Krebs and security issue is that a scammer can target you, sign you up for this, see that you
by SlowRobotAhead 8y ago
Maybe I just didn’t see the attack vector clearly, but it appears Krebs and security issue is that a scammer can target you, sign you up for this, see that you are a CapitalOne account holder - THEN use that information to further attack you say by opening a new account at the same bank.
Seems like a pretty flimsy side information gathering service. If an attacker has enough information to add an account for you, they probably have enough to determine where you bank at.
Good that the USPS can fix it easily enough, but maybe I’m missing how scammer would otherwise use this info.
- dontbenebby 8y agoI think the attack is that they can see a credit card is on it's way to your mailbox, then snatch it out of the mailbox while you're at work. Things like this are why I moved all my financial stuff over to a PO box.
- SlowRobotAhead 8y agoHow many attackers are local to you? This requires proximity obviously, I just have to think that’s even more rare. Maybe there are niche credit card thieves that like to target just the area they live in. Seems like a lot of additional risk as now you aren’t just committing CC fraud but also mail fraud.
- abarringer 8y agoI work in the Credit card industry. Account origination fraud using the real address is a thing. The bad guys hire mules to check mailboxes daily until the card arrives. This would greatly simplify that task.
- SlowRobotAhead 8y agoAh, mules. That makes more sense because people are really stupid. Takes the locality requirement off the “brains” of the operation.
- dawnerd 8y agoLuckily usps requires all new development to use cluster boxes so that should put an end to it for any new house.
- craftyguy 8y ago[Citation needed]
- dawnerd 8y agohttps://about.usps.com/postal-bulletin/2018/pb22492/html/updt_002.htm https://about.usps.com/postal-bulletin/2018/pb22492/html/upd... There are exemptions which allow for single mailboxes but going forward all new builds should have cluster boxes.
- craftyguy 8y agoThanks for responding, instead of downvoting and moving along like many others before you.