Your e-mail account is a goldmine. Technology companies push hard to keep your data secure, but there are plenty of scumbags out there who always seem to find a new way to gain an edge over the guys in white hats. Phishers, in particular, are eager to find new ways to profit from your identity and information, and they're getting some new tricks.
Phishing scam activity was quiet at the beginning of this year, according to a report in USA Today, but these attacks surged 200% from May through September, says the X-Force team at IBM (NYSE: IBM). Webmail, social media and gaming accounts are their primary targets. E-mail access, in particular, is highly sought after, since they can be use to push out spam ... while bypassing filters.
These "virgin" e-mail accounts command top dollar: a digital criminal can pick up as much as $2 for a clean account from Microsoft (NASDAQ: MSFT) Windows Live, Google (NASDAQ: GOOG) Gmail, Yahoo (NASDAQ: YHOO) YahooMail or AOL (NYSE: TWX). This is more than twice the amount typically paid for a stolen credit card account, according to Fred Rica, principal in the security practice at PricewaterhouseCoopers. Many webmail users actually do half the criminals' job for them, with 33% using just one password online and 48% using only a handful.
In addition to being able to push millions of messages through a clean account and sidestepping spam filters, online snoops can use the data you've stored in your e-mail folders to hunt for other username and password data, for your social networking accounts, for example. Also, the account can be used to reset passwords for these accounts, engineering easier access. So, losing your e-mail password can translate to compromised MySpace, Twitter and Facebook accounts, as well.
Demand for these virgin e-mail accounts is so high that the crooks are developing new techniques for accessing them, even compromising legitimate web pages as a way to infect a PC with software that can pick up keystrokes.
A few high-profile mistakes, of course, could have profound implications for several companies, including: the e-mail provider, social networking platform, credit card company and any stores where credit card data is used. One compromised account can trigger a chain reaction.
Twitter finally reveals revenue ambition, wants to be Google -- but not yet
Google says: Chrome for Christmas
Why is gold marching higher? Ask the central bankers
Add your comments