From: By Cameron England and John Beveridge
HOW safe are your credit card details on the internet? Maybe not as safe as you thought.
On the same day that a global security survey by Deloitte showed an alarming rise in online security breaches, e-Bay company PayPal suffered a major scare.
Fraudsters were using a security flaw in the highly security conscious PayPal site to trick users into using a fake website.
Even very cautious users who go to the bother of checking that the initial website have a valid security certificate could have been fooled by the sophisticated scam.
Paypal quickly worked with an internet service provider to close down the malicious website but still has no idea how many people have fallen victim to the scam.
Given that PayPal is seen as one of the more security conscious companies using e-commerce, the breach does not boost confidence in buying goods on credit over the internet.
Deloitte’s survey showed a huge rise in the number of security attacks on the 150 biggest international financial institutions in the past year.
Institutions around the world are battling a greater number of internet scams than ever before.
Security partner Julie Priest said 78 per cent of the firms confirmed a breach from outside the organisation – up from just 26 per cent the previous year.
Almost half (49 per cent, up from 35 per cent) experienced at least one internal breach.
"Execution and exploitation of these attacks require significant resources and co-ordination, which implies professional hackers and organised crime have entered the domain once ruled by script kiddies and one-off hackers," Ms Priest said.
"This shift in trend means organisations not only face more sophisticated and hard to track attacks, but are also challenged by increased risk and potential losses."
Ms Priest said the good news was that financial organisations were becoming much more active at fending off criminal attacks.
About 51 per cent of scams involved phishing (fake e-mails claiming to be from a legitimate business designed to extract private information from users) and pharming (the redirection of traffic from a legitimate website to a fake website).
Following those were spyware (software designed to intercept a computer without the user’s consent) and malware (hardware or software inserted into a system for a harmful purpose), at 48 per cent.
Ms Priest said that financial institutions were stepping up efforts.
"They are shifting priorities and starting to take necessary measures to mitigate the various security risks and challenges," she said.
"However . . . organisations should avoid being blind-sided and must strive to maintain a balanced, more holistic approach. . ."
Source: www.finance.news.com.au 20-06-2006
For more resources, click here
Tags: online security breaches, e-Bay, PayPal, phishing, fake e-mails, holistic approach
Powered by Qumana