I just ran across an article in the LA Times about the dangers of keyloggers: Hacker taps into Carson city coffers. Apparently, the city’s top financial officer had her password stolen using a program that logged her keystrokes, allowing attackers to re-play her passwords later to make large cash transfers to their bank accounts.
This is precisely the kind of attack that PhoneFactor will prevent. If she had been using PhoneFactor, her phone would have rung before each cash transfer. She could have denied the login, and simultaneously alerted the IT department so they could try to track the crook down.
Leave a Reply