Action Gamessys: Making Easy Money

Social Networks

According to Cisco, criminals are targeting social network users more aggressively. In particular, criminals are spending more time and effort trying to steal users' social networking credentials, since that makes it possible to exploit the trust of all that users' friends.

Although the exploitation of trust is crucial, Cisco predicts a decline in simple phishing and social networking scams. The company expects instead a rise exploits similar to the Zeus trojan, which steals banking credentials and propagates on social networks, mobile devices and more.

Social Engineering

Cisco warns of the "seven deadly weaknesses" exploited by social engineers:

Sex Appeal

Greed

Vanity

Trust

Sloth

Compassion

Urgency

Even the most savvy users can fall prey to social engineering. For example, Thomas Ryan of Provide Security created fake identity called "Robin Sage." Ryan was able to get hundreds of government officials and security professionals to friend this imaginary person on social networking sites and, as a result, share personal information with Ryan.

According to the report:

Clickthrough rates for most malware or spam incidents consistently hover at around 3 percent, according to data from Cisco ScanSafe. While 3 percent may not seem high, imagine the impact of repeated waves of spam to which 3 percent of workers consistently respond to and click on. Even this small percentage is the equivalent of having a gaping hole in the network firewall that cannot be closed. Instead of trying to change human behavior, security researchers are exploring the possibility of changing the way we use software to reduce risks.

Java: The New Number One Target

Java and PDF are both frequently exploited, but according to Cisco Java exploits rose last year and PDF exploits fell. Java surpassed PDF as the most commonly exploited technology.

Cybercrime in the Post-PC Era

According to the report, Windows has been so prevalent and so easy to exploit that there was no need for criminals to try to exploit other systems. However, the proliferation of other devices and OSes along with improved security in Windows 7 has changed that.

However, this move is happening slowly. A report from Forrester on security in the post-PC era notes that mobile device OSes are inherently more secure than desktop OSes due to sandboxing. This means that even jailbroken iPhones and rooted Android phones will be harder to compromise than older Windows PCs. However, social engineers can prey on anyone, regardless of the device they are using.

The Cloud: Friend or Foe?

The report cites the cloud as having both benefits and drawbacks for security. The drawback is that data can be intercepted while traveling between a server and the devices that access it. The advantage is that having data stored off-device makes it hard to extract sensitive information from lost or stolen devices.

Money Mules

The report has an interesting section on "money mules." Once a criminal has stolen a victim's bank account information, they need a way to get the money into their own accounts without getting caught. Money mules are people who transfer money from a victim's bank account to a criminal. One way to do this is to transfer money into the mule's account, then have the mule wire it via Western Union to the criminals overseas. The recipient of the wire from Western Union might not have to provide bank account information to receive the money, making them more difficult to trace.

Some mules are low-level criminals who participate for the money. Others are duped by work at home job ads. Students and people with large debts are often targets.

However, there's a shortage of mules. "Currently, the ratio of stolen account credentials to available mule capacity could be as high as 10,000 to 1," says the report.

Winners of the Cybercrime Showcase

Cisco highlights two winners in this year's "Cybercrime Showcase" - a "good" winner and an "evil" winner.

The Good winner is Thorsten Holz of the security firm LastLine. Holz identified the top 30 servers that the botnet Pushdo/Cutwail used for sending spam. Holz got ISPs to shutdown those servers and, as a result, the rate of spam decreased from 350 billion messages per day to 300 billion per day.

The Evil winner is Stuxnet, which we've covered frequently.

What, No Malvertising?

Surprisingly, there is no discussion of malvertising in the report. You can read our post "What You Need to Know About Malvertising" for more about this threat.

Products of the past…doomed…

Chinese President Hu Jintao: the US dollar-based monetary system is a “product of the past.”

He is right about that. And last week two major US credit agencies – Moody’s and Standard and Poor’s – underlined the point. They said America’s triple A credit rating would be lost if the nation continues to borrow so much money.

Amen to that, brother…

But how can the US borrow less?

Ben Bernanke says the US economy will probably grow between 3% and 4% this year.

Pretty good, huh? We can stop worrying, huh?

Wait a minute. We don’t know if the US economy will grow this year…and neither does Ben Bernanke. But even if it were to grow at 3% to 4%…would that mean we were enjoying a genuine recovery? Could the US dollar-based monetary system hold up after all? Could it surprise the Chinese and be a product of the future as well as of the past?

Let’s see how the present economic model works. You spend $10 trillion on bailouts and stimulus. This puts the whole country on course for bankruptcy…where the Chinese are telling you that your money is history…and the rating agencies are threatening to take you down a notch or two. But for your trouble you get, say, 4% growth.

Hmmmm…4% growth is equal to about $560 billion more GDP. But don’t look too closely. Much of this extra GDP is debt-fueled government boondoggling which adds nothing real to the nation’s wealth.

But in order to keep this “growth” going, you have to continue to run deficits – of about a trillion dollars a year. Hold on…what kind of business is Ben Bernanke running?

It costs more in deficit spending than you get in positive GDP growth.

Well, maybe you lose money every year…but you can make it up in the long run!

Hold on… The deficits are expected to run 5% to 10% of GDP for years. Maybe forever. If the growth rate is only in the 3%-4% range, it will mean that debt always outgrows growth. In fact, that is exactly what almost every economist projects.

Then, what’s the point? Well, maybe deficits can be cut…and the growth rate will pick up? Hey, anything is possible. And since we’re starting out in 2011 with a positive attitude…we’re ready to believe anything.

And maybe that’s what gold speculators were thinking on Friday. They sold gold – taking the price down $26 an ounce. Gold rises as confidence in the financial system falls. If gold is falling, it must mean the confidence in the Bernanke, Geithner team is increasing.

Based on the evidence so far, we’d have to take the other side of that bet. If Bernanke & Co. have any idea what they are doing it is not apparent from the public record. Even now, in the 5th year of the Great Correction, they still seem unable to see what is going on.

Bernanke:

“We got in trouble in the first place by making too many bad loans, right. So you’ve got to make good loans. We’ve got to have credit worthy borrowers.”

It may be that, in private, Bernanke has a clearer view of things. But we cannot tap his phone or channel his dreams. All we have to go on is what he says…and does. So far, he has said or done nothing that gives us confidence in the man.

He’s right: we got into trouble by making too many bad loans. But why did “we” do that? Because the Fed lent money too cheaply! It encouraged speculation and risk taking – especially by the banks, who must have known that they would be bailed out if they got into trouble.

And how could the Fed remedy the situation? Easy. It could raise rates – just as Paul Volcker did. It could put the squeeze on speculators. It could raise reserve requirements. It could allow the banks to go bust…send them a message they wouldn’t forget.

But what has Bernanke done? Just the opposite. He has rewarded the reckless speculators by buying up their bad bets (adding $1.7 trillion in trashy mortgage backed securities to the Fed’s core holdings). He has cut rates even more…bringing the effective rate down to zero for privileged borrowers. And he has created the illusion of “recovery” – by goosing up prices of stocks and commodities.

Bad policies. Bad in the short run. Worse in the long run.

Bill Bonner

for The Daily Reckoning

The US Deficit Recovery Program and Other Fallacies originally appeared in the Daily Reckoning. The Daily Reckoning, offers a uniquely refreshing, perspective on the global economy, investing, gold, stocks and today's markets. Its been called "the most entertaining read of the day."

bench craft company reviews bench craft company reviews

Monday, January 24, 2011

Making Easy Money

Social Networks

Social Engineering

Java: The New Number One Target

Cybercrime in the Post-PC Era

The Cloud: Friend or Foe?

Money Mules

Winners of the Cybercrime Showcase

What, No Malvertising?

No comments:

Post a Comment

Followers

Blog Archive

About Me