Indian police academy hosts phishing site
Keystone khaki cops
Posted in Enterprise Security, 9th October 2007 16:06 GMT
Free whitepaper – Extended Validation SSL Certificates
Hackers were able to use a Police Academy in India to host a phishing site.
Weak server security at the SVP National Police Academy in Hyderabad led to the Khaki cops becoming the unwitting hosts of a fake Bank of America phishing site. The slip-up, worthy of the inept cadets played by Steve Guttenberg and company in the long-running Police Academy series, was spotted during a review of international phishing sites by security researchers at F-Secure.
Somewhat embarrassingly among the courses offered by by the academy is one on computer crime, F-Secure notes. Hopefully course contents such as security incident response will be applied to good effect in this case.
Mikko Hyppönen, chief research officer at F-Secure, writes: "The Police Academy has been notified, and we expect that they'll sort this out swiftly."
By Tuesday afternoon, around two and a half hours after F-Secure's posting, the phishing site was unobtainable. ®


The business case for application security
Reducing messaging and web security costs with managed services
Vulnerability management buyer's checklist
Extended Validation SSL Certificates
The best practices guide for application security
Feds: Hospital hacker's 'massive' DDoS averted
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive