Dark Reading published a story featuring the results of a recent InforServ/RSA study which proclaims that while consumer awareness of phishing attacks has doubled over the past two years, the success of those attacks leaped six-fold. The survey also found that 9 out of 10 consumers would use a stronger form of security (than username and password) IF it were offered.Hear that Mr. and Mrs. Banker?
Nine in 10 consumers are willing to use a stronger form of security if offered.
Why not "offer" the same method trusted by banks to disperse cash at an unattended ATM? Swipe/Insert Card and Enter PIN. End result? The complete elimination of the threat posed by phishing. (Eliminate Typing and you eliminate how the bad guys obtain what they phish phor.)
So, instead of giving away $35 to try online bill pay or a similar online banking promotion, why not give away a PCI 2.x Certified PIN Entry Device. (PED)
- Bank Issued Card,
- Bank Issued PIN,
- Bank Issued Card Reader with PED.
Here's selected excerpts from the story:
Consumers might be more aware of phishing threats, but new attack methods duped six times as many of them in 2009 than in 2007, the study says.
Consumers are becoming increasingly concerned about the safety of their data online, according to a study published last week. In a study of more than 4,500 consumers conducted by InfoSurv and sponsored by RSA, researchers found that consumer awareness of phishing attacks has doubled between 2007 and 2009. The number of consumers who reported falling prey to this attack increased six times during that same time period.
The sheer volume of phishing attacks launched in recent months is also contributing to these trends, RSA said. The RSA Anti-Fraud Command Center recently reported the highest-yet detected rates of phishing attacks between August and October 2009, as well as a 17 percent increase in the total number of attacks between 2008 and 2009.
An increase in consumer knowledge of online threats is further evident from the growth in the number of respondents that expressed awareness of Trojans. In 2007, 63 percent of consumers stated they were aware of Trojans and in 2009 that figure climbed to 81 percent.
Consumers agreed that their identities should be better protected than a simple username and password on social networking (59 percent), healthcare (64 percent), government (70 percent), and online banking (80 percent) Websites.
Read the article in full
