Die Nationale IT-Entwicklungsagentur (NITDA) der nigerianischen Regierung beherbergt auf ihrem Server derzeit eine Phishingseite, die sich gegen das britische Bankhaus Halifax richtet. Die Toolbar-Community von Netcraft hatte die betrügerischen Inhalte entdeckt und die NITDA darüber informiert. Ironischerweise ist NITDA die Institution für IT-Projekte in Nigeria, welche die Sicherheits-Richtlinien für das Computernetzwerk der nigerianischen Regierung aufstellt. Das Dokument beinhaltet auch die nationale Politik zur Netzwerksicherheit.
The Nigerian government's National Information Technology Development Agency (http://www.nitda.gov.ng/) is currently hosting a phishing attack against Halifax (http://www.halifax.co.uk/) on its own website at www.nitda.gov.ng. NITDA has been notified, and the Netcraft Toolbar (http://toolbar.netcraft.com/) community (which discovered the fraudulent content) is already protected from this attack. Ironically, NITDA is the clearing house for IT projects in Nigeria, and establishes a set of security guidelines for the Federal Government of Nigeria in its Computer Network Architecture Standards (COMNAS) Framework. This document covers the national policy on network security and describes vulnerability scanning and penetration testing procedures which may have prevented the fraudulent content from appearing on its own website. Phishing sites are quite commonly hosted on government infrastructure: In July, Netcraft blocked 146 new phishing sites hosted in government domains around the world. |
Quelle: Netcraft
