Online Fraudsters Targeting Election 2008

[WhiskeyGirl]

Online Fraudsters Targeting Election 2008

By Kevin McLaughlin, ChannelWeb

6:37 PM EDT Thu. Aug. 07, 2008 As Election 2008 looms, and candidates increase their use of the Internet as a tool for communicating with voters, miscreants are licking their chops at the idea of using political campaigns to generate ill-gotten gains.
In a presentation at the Black Hat security conference in Las Vegas, Oliver Friedrichs, director of emerging technologies in Symantec (NSDQ:SYMC)'s Security Response team, explained how fraudsters are using tactics like typo-squatting and phishing to drive traffic to phony election Websites and collect campaign donations from unwitting voters.

Candidates began soliciting donations via email during the 2004 election, and Senator John Kerry pulled in a whopping $82 million in online donations during his campaign.

But in 2008, email has become a far more powerful fundraising vehicle. Senator Barack Obama has thus far raised $350 million in campaign funds, and between 80 and 90 percent of this sum came from online donations, according to Friedrichs.

(snip)

But typo-squatters are also able to re-direct email traffic and intercept email for a particular candidate's campaign, which is far more of a concern than re-directing URLs to spoofed Websites, Friedrichs said.

Profit motivated phishing, a particularly slimy tactic that often appears in the wake of natural disasters, is on the rise as Election 2008 approaches. And since all candidates are accepting donations online through their Websites, it's basically inevitable that some users will be duped by the scammers, noted Friedrichs.

However, campaigns can protect themselves by using tools like Sender ID and Sender Policy Framework (SPF), which are designed to stop spoofing by allowing administrators to specify to receiving mail servers a list of addresses that can send mail from a candidate's domain, Friedrichs said.

read the rest of the article here -
http://www.crn.com/security/209904546

Wow.