Online payment company PayPal reported that it has fixed a Web site glitch through which the operators of a phishing scheme had been attempting to steal personal data of the company's customers.
According to officials for the eBay subsidiary, PayPal updated coding on its Web site to block a vulnerability that phishers based in South Korea had been exploiting in an effort to rip off its members.
The sophisticated threat attempted to lure unsuspecting users to a URL hosted on PayPal's legitimate Web site that had been altered by cyber-criminals using a so-called cross-site scripting attack.
Using such attacks, criminals seek out vulnerabilities in legitimate Web pages and add their own code in order to append their own content to the sites or redirect users to other fraudulent sites.
The schemes can also steal information stored as so-called Web browser cookies, which often contain user names, passwords and other sensitive data.
-
The Role of Standards in Cloud Security
Security is often cited as a primary cause for concern...
Watch Now -
Ensuring Resources for Mission Critical Workloads
Application workloads can thrive in cloud environments,...
Watch Now -
Improving Security in the Public Cloud
One of the main concerns about moving data to a public...
Watch Now
