cloud

Imperva uncovered a new, automated, cloud-based phishing kit.  Our Application Defense Center found this kit on a hacker forum.

Unlike previous phishing kits that have been available for years, this new approach lives in the cloud and relies on hackers exploiting other hackers.  And with the new cloud-based approach the infrastructure for this phishing kit never goes away.  Why?  In traditional schemes when you take down a server you take down not only the web page but also the back end data collection capability. In this cloud version, data collection is hosted separately from the phishing web sites which means hackers only need to repost the web front end in a new location to be back in business.  (It's like whackamole).

I never really thought IBM would also have entered the “cloud” in a big way! I thought the traditional players may be a bit more relaxed but I guess the “cloud” has shaken them up.

Another service that interested me at Cloudforce2 was the LogMeIn service. Why? Well read on...