The Lazy Genius

Security News & Brain Dumps from Xavier Ashe, a Bit9 Client Partner

  • Subscribe

  • Xavier’s tweets

    Error: Twitter did not respond. Please wait a few minutes and refresh this page.

  • Goodreads

  • Enter your email address to follow this blog and receive notifications of new posts by email.

    Join 1,186 other followers

  • Blog Stats

    • 52,779 hits

'Make your own man-in-the-middle attack' online kit found

Posted by Xavier Ashe on January 12, 2007

Fraudsters are hawking free trials of “universal”
man-in-the-middle phishing kits through an online forum, security
researchers said today.

RSA's Anti-Fraud
Command Center (AFCC) discovered an internet forum populated by
fraudsters that is offering a set of tools to create a
man-in-the-middle scheme, according to a company news release.

The kit allows would-be attackers to create a bogus URL that
communicates with both the end user and the legitimate website in real
time, the release said. The scammer must first dupe the user into
visiting the spoofed site.

These so-called universal phishing kits allow users to configure
their attacks to take advantage of any target website, according to the

Script Kiddies are moving into Phishing.  Great.  From SC Magazine.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: