Thursday, 22 November 2007

The value of passwords

Source: Frequency X

Arbitrary username/password combinations have value in the black market of cybercrime independently of where they were obtained. This is because many people choose the same combination on several sites. Thus, in many cases it's not necessary to phish for authorisation credentials: you can simply coax someone into creating an account, and then try the resulting username/password combination at various other high profile sites.

No comments: