Saturday, August 31, 2002

Security Alert: Internet Explorer Hole Exploited For Banking Hack
A flaw in Microsoft's implementation of the Secure Sockets Layer (SSL) in Internet Explorer, which was recently reported on ExtremeTech, has been used to hijack online banking systems.

According to Reuters, a Swedish hacker has demonstrated that this flaw can be used to subvert Internet banking systems. During the demonstration, the hacker transparently transferred money into his account from other unsuspecting customers.

Luckily for those customers, and the bank, this particular incident was only a benign demonstration. However, it graphically illustrates the tenuous state of online banking security. Based on the results of this demonstation, it is quite possible that others are exploiting this same bug to illegally siphon cash from the accounts of personal and business customers using a web-browser to bank on-line.
http://www.extremetech.com/article2/0,3973,493241,00.asp

No comments:

Post a Comment

con·cept