[LINK] Another phishing tale

Stephen Wilson swilson at lockstep.com.au
Fri Sep 5 16:19:15 AEST 2008


Kim Holburn wrote:
> I got an email from my credit union two weeks ago that I was sure was  
> a phish.  I reported it to AUSCERT and they were sure too.  Then after  
> communicating with the aforesaid company it turns out that the email  
> was genuine and really was from my credit union.  It's very sad that  
> this credit union doesn't have a clue about phishing and would send  
> out emails that are virtually indistinguishable from phishing emails.

That's a twist!  How would one set out to make a genuine e-mail look 
different form a phish?  ;-)

More seriously, this thread started out mentioning the coincidence of 
receiving phishing shortly after a genuine banking transaction.  I got 
the same thing a couple of years ago in connection with ebay.  On two 
occasions, after sending a business e-mail to someone I know at ebay, I 
received 'ebay' phishes each within an hour of my sending an email!

I was never quite sure if that was coincidence or not.  Could have been 
random given the high background rate of spam.

Cheers,

Steve.


Stephen Wilson
Managing Director
Lockstep

Phone +61 (0)414 488 851

www.lockstep.com.au
-------------------
Lockstep Consulting provides independent specialist advice and analysis
on authentication, PKI and smartcards.  Lockstep Technologies develops
unique new smart ID solutions that safeguard identity and privacy.



More information about the Link mailing list