Security threats Toolkit

Story: Banks under fire as phishing attacks accelerate

• 
• 

The log files already have the solution

Having examined a number of phishing pages, they pretty much all refer to the original page graphics on the genuine bank web site. Presumably therefore, the banks web site will have logs of the referring pages for the graphics files, so therefore the addresses of all the current phishing pages.

Why can they not use this info to get these pages shut down!? I made this suggestion to my own bank a while ago and didn't even get an acknowledgment of the mail, let alone an actual response .. and this was after resending the message and asking for an acknowledgment .. several times.

The fact that they are not doing the log file tracing, or even bothering to be polite to their customers about the subject, means to me that they're not really that bothered about OUR security, as long as THEY don't have to stump up for anything and can keep investing in packages of dodgy US mortgages while claiming 7 digit bonuses.

• 
• 

• 
• 
• 

Full Talkback thread