Abstract :
Online criminals have a new target - the valuable documents that are lying vulnerable on corporate networks. This article describes the new phenomena of enterprise phishing. This is when intruders go into organisations looking for key documents. They may buy them from insiders, they may come in, do directory harvest attacks and look for specific employees and the access they have to documents, and they then sell these for a lot of money. Business strategic plans and intellectual properties are two such documents considered.
