Spear Phishing through Blogs

This post is a warning about a dangerous attack vector against bloggers and blog readers by hackers and spammers, an attack which is very likely to appear in the near future. While I realize that my warning might even expedite the timetable, it's just a matter of time IMHO before someone puts the two and two together. Maybe someone already has. Spear phishing is a phishing attack which is custom tailored to an individual. The potency of spear phishing lies in personalized content containing information only a very small number of people or companies would know. Usually, it's some shared knowledge or experience like a person's recent e-Bay bid on a laptop. A personal email mentioning the bid would make the potential victim assume the sender is the seller. True? Not always. Spear phishing is typically not very scalable because each attack has to be personalized. With blogs, however, spear phishing attack is scalable. The danger is that the relationship betweeen bloggers and between ...

10:58:19 December 5, 2005, Monday (PST) Source: Don Park's Daily Habit

Additional Info