honoluluadvertiser.com

Sponsored by:

Comment, blog & share photos

Log in | Become a member
The Honolulu Advertiser
Posted on: Sunday, October 12, 2008

Financial worries a jackpot for scams

By JON SWARTZ
USA Today

SAN FRANCISCO — The rippling financial crisis has sent consumers scurrying to the Internet for answers and advice. Online fraudsters are right behind, devising ways to steal personal information.

Cybercrooks, spammers and phishers are creating fake Web sites, spam, phishing attacks and malicious software code to take advantage of anxiety during the economic calamity. Like other extraordinary news events, the situation has heightened fears and made people desperate for information, say computer-security experts.

"It's a new spin on old tactics," says Andre Gold, former head of information security and risk management at ING.

  • Phishing. Most of the scams involve phishing against the backdrop of bank bankruptcies, mergers and takeovers. Current and former customers of JPMorgan Chase and Washington Mutual are being inundated with phishing attempts as Chase navigates an acquisition of Washington Mutual.

    One such scam is a communication that purports to come from Chase. It asks customers to go to a supposed Chase Web site, which is fake, and provide personal information, such as user ID, password, name, address, phone number and Chase credit card number.

    Phishing attacks on Citigroup customers soared shortly after it announced its intention last month to acquire struggling Wachovia, according to Internet researcher Netcraft.

  • Fake Web sites. Many of the phishing attacks advise banking customers to follow links to Web sites and update their data. The sites are subtle fakes, designed to trick victims into divulging their user name, password and more.

    Citigroup and Wachovia customers are among the targets, says Ori Eisen, chief innovation officer at The 41st Parameter, an anti-online-fraud vendor and former anti-fraud director at American Express.

    "People's life savings are at risk," says Andy Klein, an e-mail expert at security vendor SonicWall. "Many are especially antsy because they haven't heard from their merged banks yet."

  • Targeted malware attacks. Concern about targeted cyberattacks was a major topic at a London conference of representatives of leading U.K. banks this month, says Eisen, who attended.

    Financial institutions such as Bank of America post advisories on their Web sites about suspicious e-mail and other online fraud. WaMu's Web site has a big banner with information on its merger with Chase.