nCircle The Lens Blog

Ric Romero Reporting...

The title of this piece at SC Magazine is "Phishing attack use Google Maps, IP addresses to obtain victim location." I got this headline in my RSS reader and thought it sounded interesting. Let me sum up the relevant points for you:

- Attackers are spreading keylogging malware via a fake new report.
- The malware can determine and report the victim's IP address.
- The IP address can be used to determine the user's location.
- Google maps will display the user's location if you enter it.
- This information can then be used for identity theft.

So, the breaking news is that computers have IP addresses? Or is it that malware can find them? Or perhaps that IPs just might indicate physical location?! No no, wait, it's that Google maps produces highly accurate visualizations of a location from a full or even partial address!!!??? When will the madness stop!?

Now you might be wondering, as am I, exactly how the physical location is being used for identity theft. These sorts of connections from the virtual world to the concrete world are interesting. Are they showing up and going through people's garbage? Are they using the address to submit fraudulent credit card applications? Are they tailoring spam to the location? We'll just have to wait for the hard-hitting follow-up article.


TrackBack

TrackBack URL for this entry:
http://blog.ncircle.com/cgi-bin/mt-tb.cgi/155


Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Verification (needed to reduce spam):



About

This page contains a single entry from the blog posted on February 23, 2007 9:06 AM.

The previous post in this blog was Shout hacking?! Oh please....

The next post in this blog is Default Credentials.

Many more can be found on the main index page or by looking through the archives.



Bio

Blog: The Lens
Author: Tim Erlin

Tim Erlin, CISSP, is a Principal Product Manager at nCircle, responsible for vulnerability management and configuration auditing. In his nearly 10 year tenure at nCircle, he has also held the positions of Senior Sales Engineer and QA Engineer. His career in information technology began with systems and network administration.


   




Categories

  • Blog
  • Information Security Market
  • Regulations and Compliance
  • Vulnerability Research