Sophos

Talk to our experts

Find your local press contact

Resources

Info feeds

What are info feeds?

23 August 2007

AOL identity thief faces seven year jail sentence 23-year-old sent out Trojan horse disguised as malicious greeting cards

Phishing. Image copyright (c) Sophos
Phishers steal money and identities from internet users.

Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have reminded computer users of the threat posed by phishers following the conviction of a 23-year-old identity thief who targeted users of AOL.

Michael Dolan, formerly from West Haven, Connecticut and North Miami Beach, Florida, has admitted stealing names, credit card details and social security numbers from AOL members.

From 2002 until his arrest on 26 September 2006, Dolan used malicious software to steal AOL screen names from chat rooms. The users were then spammed with electronic greeting cards claiming to be from Hallmark.com, but which in reality installed a Trojan horse that prevented AOL customers from logging into their account without entering personal information.

Dolan would use the stolen information to order online goods and steal money from ATM machines.

A plea agreement with the US Department of Justice calls for Dolan to spend seven years in prison, and then remain on supervised probation for two to three years. He may also have to pay a fine of $250,000.

"Identity theft is a growing problem, and it's all too easy for innocent internet surfers to be duped into handing over confidential information about themselves," said Graham Cluley, senior technology consultant for Sophos. "Cybercriminals need to be given a strong message that they will be given a serious punishment if they are caught. Individuals, meanwhile, need to become more clued-up about how to protect their identities online."

Dolan is scheduled to be sentenced on 14 November 2007. More information about the case against him is described on the United States Attorney's Office District of Connecticut website.

Last year Sophos revealed in a survey that 58% of people receive a phishing email every day. The security company recommends that businesses protect themselves with a consolidated solution which can control network access and defend against the threats of spam, hackers, spyware and viruses.

  • SQL injection attacks are the biggest threat
  • 90% of malware on legitimate sites
  • Hackers exploit Web 2.0

About Sophos

Sophos enables enterprises all over the world to secure and control their IT infrastructure. Sophos's network access control, endpoint, web and email solutions simplify security to provide integrated defenses against malware, spyware, intrusions, unwanted applications, spam, policy abuse, data leakage and compliance drift. With over 20 years of experience, Sophos protects over 100 million users in nearly 150 countries with its reliably engineered security solutions and services. Recognized for its high level of customer satisfaction and powerful yet easy-to-use solutions, Sophos has received many industry awards, as well as positive reviews and certifications.

Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com

See also: