Thursday, June 2, 2011

'The Cloud' doesn't protect you from yourself

As the BBC reports, cloud-based systems like Gmail are vulnerable to the same old phishing/social engineering hack techniques:

Hackers in China have compromised personal e-mail accounts of hundreds of top US officials, military personnel and journalists, Google has said.
The US company said a campaign to obtain passwords originated in Jinan and was aimed at monitoring e-mail.
Google said its security was not breached but indicated individuals' passwords were obtained through fraud.
The e-mail scam uses a practice known as "spear phishing" in which specific e-mail users are tricked into divulging their login credentials to a web page that resembles Google's Gmail web service (or which appears related to the target's work) but is in fact run by hackers, according to a technical report released by Google.

No comments:

Post a Comment

Blog Archive