Comments on: Online “Pick Pocket” Attacks Getting Worse After All These Years http://www.veracode.com/blog/2007/03/online-%e2%80%9cpick-pocket%e2%80%9d-attacks-getting-worse-after-all-these-years/ Application security testing, analysis, and metrics Fri, 10 Feb 2012 12:18:17 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Chris Wysopal http://www.veracode.com/blog/2007/03/online-%e2%80%9cpick-pocket%e2%80%9d-attacks-getting-worse-after-all-these-years/comment-page-1/#comment-188 Chris Wysopal Thu, 22 Mar 2007 15:13:26 +0000 http://www.veracode.com/blog/?p=32#comment-188 I think this is just standard behavior in a criminal enterprise - specialization and separation of duties. In the illegal drug business you have manufacturers, mules, wholesalers, street level dealers. Some operations are completely vertically integrated but most aren't. There are people who are very good at stealing information but don't know how to launder money. There are people who are very good at laundering money but can't steal the information. Perhaps over time, some of these operations will become more vertically integrated but specialized operators will likely persist. -Chris I think this is just standard behavior in a criminal enterprise – specialization and separation of duties. In the illegal drug business you have manufacturers, mules, wholesalers, street level dealers. Some operations are completely vertically integrated but most aren’t.

There are people who are very good at stealing information but don’t know how to launder money. There are people who are very good at laundering money but can’t steal the information. Perhaps over time, some of these operations will become more vertically integrated but specialized operators will likely persist.

-Chris

]]> By: Pete http://www.veracode.com/blog/2007/03/online-%e2%80%9cpick-pocket%e2%80%9d-attacks-getting-worse-after-all-these-years/comment-page-1/#comment-186 Pete Wed, 21 Mar 2007 23:29:11 +0000 http://www.veracode.com/blog/?p=32#comment-186 What is interesting to me is why these folks (in the ABC News email transcript) would sell accounts but not exploit them themselves... like it's okay to make some money, but not a lot of money. Any thoughts? Pete What is interesting to me is why these folks (in the ABC News email transcript) would sell accounts but not exploit them themselves… like it’s okay to make some money, but not a lot of money. Any thoughts?

Pete

]]>