From: "SpammersDie" 
Newsgroups: uk.finance misc.consumers
Subject: Re: FT: Phishing, pharming and fraud
Date: Wed, 09 Mar 2005 14:07:10 GMT


"Alec McKenzie"  wrote in message 
news:mckenzie-BA2ACC.13015809032005@news.aaisp.net.uk...
> jim@jibbering.com (Jim Ley) wrote:
>> there's nothing about other operating systems that protect them other
>> than obscurity. . .
>
> Jim: your ignorance is showing. . . :-)

Bah. You don't need to infiltrate the client OS at all to pull off this kind 
of attack - the bad guys just need to attack the global DNS servers. They 
did that just recently so that queries to google, ebay were being redirected 
to a hacker site.

http://www.dslreports.com/forum/remark,12832254?hilite=dns+poisoning

They could just as easily have made it so that queries to citibank, wamu, 
etc. are redirected to a phishing site. No need to load a trojan onto the 
user's machine or depend on the user's gullibility in clicking your link.