Re: This is [phishing] news?!?

[Conrad Constantine <conrad () 1211 net>]

On 10/5/2012 4:35 PM, Stephanie Daugherty wrote:
> Yeah, would be nice if the term was properly explained, rather than
> turning into another buzzword. The old term "stairstepping" almost
> captures the meaning just as well, except that it leaves the "lying in
> wait" part off.
>
> -Steph

I've always liked to refer to it as "what security threats looked like 
before mass-target criminal malware became the norm". This astonishment 
over a "sudden move towards highly-targeted attacks" is a wonderful 
shiboleth to identify people that have only been aware of infosec some 
since some time in the last decade. Everything old is new again, and 
people love to assume that "new to me" means "new to everyone"...sigh..

(full disclosure: I've got an article on exactly this topic making its 
rounds through the security trade press this week).

ObFunSec: When can we start getting people worked up about MPT again? 
Y'know.. those Mundane Persistent Threats, the kind we ask every year to 
get manpower, budget and authority to fix.





_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.