<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/1.5.1-alpha" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: PayPal Phish With a Sting in the Tail&#8230;</title>
	<link>http://momusings.blogsome.com/2006/11/23/paypal-phish-with-a-sting-in-the-tail/</link>
	<description>Random ramblings and musings about all things malware and related net-nasties...</description>
	<pubDate>Fri, 08 Jan 2010 23:49:28 +0000</pubDate>
	<generator>http://wordpress.org/?v=1.5.1-alpha</generator>

	<item>
		<title>by: kurt wismer</title>
		<link>http://momusings.blogsome.com/2006/11/23/paypal-phish-with-a-sting-in-the-tail/#comment-169</link>
		<pubDate>Thu, 23 Nov 2006 21:23:50 +0000</pubDate>
		<guid>http://momusings.blogsome.com/2006/11/23/paypal-phish-with-a-sting-in-the-tail/#comment-169</guid>
					<description>and the purpose of the 'sting' is . . .

at a guess, some people might realize that their account information has just been compromised and that they should go to paypal to change it - but doing so will be much harder if their computer no longer works that becomes much harder... also, the fact
that the computer no longer works is an excellent way to keep the mark distracted so that maybe they'll forget all about the email telling them to visit paypal and enter X... finally, since the advice many people (including microsoft) give is to forma
t the drive and rebuild the machine from scratch or to revert to a previously saved image of the drive, the phish email and the browser cache and url history will be gone - which means there won't be any evidence if one went looking for such things and
you also won't be able to discover the account compromise by being curious and revisiting the site at a later date (when your anti-phishing tech has been updated)...

in short, to inhibit the discovery of and/or recovery from the account compromise...</description>
		<content:encoded><![CDATA[	<p>and the purpose of the &#8217;sting&#8217; is . . .</p>
	<p>at a guess, some people might realize that their account information has just been compromised and that they should go to paypal to change it - but doing so will be much harder if their computer no longer works that becomes much harder&#8230; also, the fact<br />
that the computer no longer works is an excellent way to keep the mark distracted so that maybe they&#8217;ll forget all about the email telling them to visit paypal and enter X&#8230; finally, since the advice many people (including microsoft) give is to forma<br />
t the drive and rebuild the machine from scratch or to revert to a previously saved image of the drive, the phish email and the browser cache and url history will be gone - which means there won&#8217;t be any evidence if one went looking for such things and<br />
you also won&#8217;t be able to discover the account compromise by being curious and revisiting the site at a later date (when your anti-phishing tech has been updated)&#8230;</p>
	<p>in short, to inhibit the discovery of and/or recovery from the account compromise&#8230;
</p>
]]></content:encoded>
				</item>
</channel>
</rss>
