Phishanomics: The Economics of Phishing, the iframe attack and the Brand ROI of Security Spending

This paper will argue that the iframe attack (popularized by the Bank of India hack) has fundamentally altered the way that security professionals must defend less important websites. By allowing phishers to leverage a company’s brand to steal from users, the iframe attack has made an entirely new class of formerly unimportant sites into material security concerns.

Read paper from NT OBJECTives