
286 ◾ Cyber Fraud: Tactics, Techniques, and Procedures
become specialists and prefer to carry out their specialty or specialties many times to maximize
efficiency.
Even a simplified diagram such as Figure 8.6 may appear complex, but there are only three
main elements to the IFrame attacks:
1. Distribution — e IFrames pointing to the attacker’s server must be widely distributed
to be effective. Spammers can send e-mails with IFrames inside. Hackers can deface Web
sites and insert IFrames. Viruses or worms can add IFrames to documents on computers.
Toolkits can automate a variety of these tasks.
2. Exploitation — Once IFrames are in place, they