ID Theft Product » 1524 http://idtheftproduct.com Mailboxes, Shredders, Software & Services Fri, 21 Dec 2007 21:29:39 +0000 http://wordpress.org/?v=2.3.1 en OWA Fishing attack http://idtheftproduct.com/2007/12/10/owa-fishing-attack/ http://idtheftproduct.com/2007/12/10/owa-fishing-attack/#comments Mon, 10 Dec 2007 09:00:00 +0000 http://idtheftproduct.com/2007/12/10/owa-fishing-attack/ I just love Gnucitizen - this time Adrian Pastor explains how to use an Outlook Web Access design flaw to create a phishing attack. 

The post is a bit technical, but it gives you a very good idea of just how easy it is to fool your OWA users to give up their user names / passwords to a hacker.

The scary bit is that Adrian told Microsoft about this a couple of years ago - but since this is a design feature and not a bug, Microsoft is not changing it.

So if you are running OWA - make sure to take precautions!  

Bookmark/Search this post with:

delicious | digg | reddit | magnoliacom | newsvine | furl | technorati | icerocket


Original post by Yahoo! News Search Results for identity theft

Additional Reading

]]> http://idtheftproduct.com/2007/12/10/owa-fishing-attack/feed/