E-mail wiretapping used to spy on corporate communications
April 6, 2001
These Web bugs can be embedded into HTML based emails before they are sent. The code then acts to covertly copy the original sender each time this email is forwarded on within the recipient's system.
The issue has been well known within the security community since February, when online watchdog the Privacy Foundation highlighted the problem. Activis says it is a live threat that is been actively exploited. It picked up the trend in the course of providing content management services for its clients.
The advice is timely because there is evidence that businesses do not take email security seriously enough, despite conducting more and more sensitive business negotiations over the Net, chiefly because it greatly speeds up discussions.
A recent report on email security within mergers and acquisitions, published by IT services company Northgate Information Solutions, found 100 firm out of 500 sent 70 per cent or more of confidential information via email. Despite this, only 11 per cent of the total sample said that they had secure, encrypted email. Lawyers, who really ought to know about the need for confidentiality, were the worst offenders with only eight per cent insisting on using encrypted emails when sending confidential information to external parties
John Leyden, TheRegister.Co.Uk