Re:Digicert Withdraws from the CA Security Council
by nailer on Monday July 02, 2018 @09:21AM
(#17441369)
In some cases - most banks use 2FA, compromising email wouldn't be sufficient to handle that, but a phishing site can do a pass through attack and get both from the user.
But the point still stands: getting access to someone's bank account is far more direct way of getting access to their money than their gmail.
But the point still stands: getting access to someone's bank account is far more direct way of getting access to their money than their gmail.