// you’re reading...

1524

OWA Fishing attack

By ⋅ December 10, 2007 ⋅ Post a comment

I just love Gnucitizen - this time Adrian Pastor explains how to use an Outlook Web Access design flaw to create a phishing attack. 

The post is a bit technical, but it gives you a very good idea of just how easy it is to fool your OWA users to give up their user names / passwords to a hacker.

The scary bit is that Adrian told Microsoft about this a couple of years ago - but since this is a design feature and not a bug, Microsoft is not changing it.

So if you are running OWA - make sure to take precautions!  

Bookmark/Search this post with:

delicious | digg | reddit | magnoliacom | newsvine | furl | technorati | icerocket


Original post by Yahoo! News Search Results for identity theft

Discussion

No comments for “OWA Fishing attack”

Post a comment

Categories

WordPress database error: [Table 'idtheft_idtheftproduct.wp_categories' doesn't exist]
SELECT cat_ID FROM wp_categories WHERE cat_name='Asides'

WordPress database error: [Table 'idtheft_idtheftproduct.wp_categories' doesn't exist]
SELECT cat_ID FROM wp_categories WHERE cat_name='Featured'