Monday, September 13. 2004
More on hash-busting
There's a good article in eWeek on the steganographic CitiBank phishing schemes.
Although steganography was intended for hiding secret messages within images, it has the added effect of changing the hash value of an image. So the phishers are using the side effect by hiding random text withing their phishing image so SPAM filters see each message as different. ALthough I haven't tried to get the text out of the image, I'm assuming that the text hidden in the HTML would be the same as the text within the image. (See Phun with Phishing.)
Remember, we're not dealing with young kids who can't speak English anymore. These guys are getting sophisticated.
Although steganography was intended for hiding secret messages within images, it has the added effect of changing the hash value of an image. So the phishers are using the side effect by hiding random text withing their phishing image so SPAM filters see each message as different. ALthough I haven't tried to get the text out of the image, I'm assuming that the text hidden in the HTML would be the same as the text within the image. (See Phun with Phishing.)
Remember, we're not dealing with young kids who can't speak English anymore. These guys are getting sophisticated.
Trackbacks
Trackback specific URI for this entry
No Trackbacks