News for hackers. Stuff that matters.

A comment on Digicert Withdraws from the CA Security Council. Parent comment

Re:Digicert Withdraws from the CA Security Council by ubernostrum on Monday July 02, 2018 @01:43AM (#17439552)
Getting access to someone's personal email account is often sufficient to gain access to everything else they use, including banks and other financial services, at least for long enough to clean out some money.
[ Parent | on HN ]
Re:Digicert Withdraws from the CA Security Council by nailer on Monday July 02, 2018 @09:21AM (#17441369)
In some cases - most banks use 2FA, compromising email wouldn't be sufficient to handle that, but a phishing site can do a pass through attack and get both from the user.

But the point still stands: getting access to someone's bank account is far more direct way of getting access to their money than their gmail.

[ Parent | on HN ]