Spear phishing is one of the most effective ways to break into a corporate network, and recent studies show that employees can be easily tricked on social media to provide the information needed to launch attacks.
A phishing attack is only as good as the information hackers are able to gather on the intended victim, who is less likely to click on a malicious link or attachment in an email that does appear to come from a trusted sender. As a result, criminals often research their targets on the Web.
For example, Websense Security Labs recently found a fake LinkedIn profile gathering information that could be used in future attacks.
The profile summary pretends to be that of "Jessica Reinsch," a made-up employee of a real dating Web site that connects young women with older, wealthy men. The site is located in Switzerland.
To read this article in full or to leave a comment, please click here
ConversionConversion EmoticonEmoticon