27 March 2017
visit nextgenbanking.co.uk

Phishing attacks surge in 2008

20 February 2009  |  12121 views  |  2 fish school

The volume of phishing attacks detected by RSA during 2008 grew by 66% over those observed throughout 2007, with UK and US financial institutions bearing the brunt of the assaults.

The first six months of 2008 demonstrated a dramatic increase in the volume of phishing attacks detected by RSA, peaking in April with 15,002 attempts. Attacks initiated by the notorious Rock Phish Gang and those initiated via other fast-flux attacks accounted for over half of the bombardment during this period.

US financial institutions suffered a whopping 68% percent of the total number of attacks, ten times higher than the number of brands targetted within the UK - which ranked a distant second on the list.

Although the US led by a huge margin in terms of the number of attacked brands during 2008, the UK led in terms of total volume of exploits. This is a result of several massive surges of attacks against a small number of the country's financial institutions during 2008.

RSA also noted the expansion of phishing into new territories, such as Latin America and Asia Pacific as a key contributory factor in this year's volume growth.

Comments: (2)

Dean Procter
Dean Procter - Transinteract - Sydney | 20 February, 2009, 10:34

Personal observation leads me to believe that phishing has risen yet more in 2009 and so have 419 scams etc...Hardly unpredictable nor unable to be fixed.

More's Law -  http://www.finextra.com/community/fullblog.aspx?id=1167

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Ted Egan
Ted Egan - ThreatMetrix Inc. - Sydney | 27 February, 2009, 17:04

The real issue is that there are some brilliant technologies out there to counteract phishing but the drivers for adoption of such technology solutions by the financial institutions, online merchants and other website owners is not happening due to the fear of change.

However on the flip side the developers of the phishing websites can on the fly implement and rollout their latest technology at whim, when and where ever they want. If the phishing application does not work then they try something different.....no issues.

Now, if we are going to combat the increasing growth of phishing, the finance industry, online merchants and even government need to act creatively without delay with a combination of solutions and just not rely on a part fix.

The trouble is today the technologies being deployed to stop phishing are still not working, they are based on older methodolologies. The frailty most people or organisations fall into, is looking for the solution in a browser based technology i.e. a plug-in or by developing or implementing anti-phishing tool bar. The problem is then that this approach is also failing time after time. The criminals have stepped beyond the phishing filter barrier with techniques that just walk around these filters. One interesting growth area for phishing is to compromise the computer and injecting code into what appears to be a secure website. Traditional approaches to this type of phishing just do not work and will not stop this attack!

There is already the technology to detect phishing websites and even verify all parts of a website when a consumer visits. The technology even blocks the fake website or the key parts of the authentic website which have a fake overlay i.e. x-site scripting and alerts the consumer if they are visiting a non authentic financial institutions, merchant or even a government website. The technology will even stop code injection. This is done in real-time without delay. This capabilitiy is already developed and does not rely on traditional anti-phishing approaches.

We need to look beyond phishing filters, and the browser plug-in ASAP if there is to be any change in the growth of phishing this year or in the future.

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Phishers target Twitter

Phishers target Twitter

06 January 2009  |  8695 views  |  0 comments
Phishers look to cash in on bank chaos

Phishers look to cash in on bank chaos

21 October 2008  |  8044 views  |  0 comments
French president Sarkozy falls victim to phishing fraud

French president Sarkozy falls victim to phishing fraud

20 October 2008  |  13874 views  |  0 comments | 1 tweets
Guilty plea in $700,000 phishing case

Guilty plea in $700,000 phishing case

10 October 2008  |  8978 views  |  0 comments
RBS is top UK phishing target

RBS is top UK phishing target

07 August 2008  |  9084 views  |  0 comments
Apacs reports surge in phishing scams

Apacs reports surge in phishing scams

24 July 2008  |  6760 views  |  0 comments
International phishing gang busted

International phishing gang busted

23 May 2008  |  9246 views  |  0 comments
UK phishing attacks up 200% in Q1 - Apacs

UK phishing attacks up 200% in Q1 - Apacs

15 April 2008  |  8824 views  |  0 comments
Phishers take aim at MasterCard SecureCode

Phishers take aim at MasterCard SecureCode

10 April 2008  |  22381 views  |  0 comments
Phishers target HMRC data loss victims

Phishers target HMRC data loss victims

22 February 2008  |  7624 views  |  0 comments
Phishers targeting company executives

Phishers targeting company executives

31 January 2008  |  11108 views  |  0 comments
Phishers targeting phishers

Phishers targeting phishers

25 January 2008  |  7582 views  |  0 comments
Natwest most targeted by phishers

Natwest most targeted by phishers

23 January 2008  |  7721 views  |  0 comments
Dutch cops arrest 14 ABN Amro customers as phishing mules

Dutch cops arrest 14 ABN Amro customers as phishing mules

20 December 2007  |  8364 views  |  0 comments
Phishing losses hit $3.2bn in 2007 - Gartner

Phishing losses hit $3.2bn in 2007 - Gartner

17 December 2007  |  12703 views  |  0 comments
German cops arrest phishing gang

German cops arrest phishing gang

14 September 2007  |  9353 views  |  0 comments

Related company news

 
Visit capgemini.comvisit abe-eba.eu

Top topics

Most viewed Most shared
French retailer Carrefour launches online bank accountFrench retailer Carrefour launches online...
57410 views comments | 16 tweets | 36 linkedin
European Commission opens public consultation on fintechEuropean Commission opens public consultat...
9897 views comments | 44 tweets | 26 linkedin
MAS to roll out national KYC utility for SingaporeMAS to roll out national KYC utility for S...
9108 views comments | 26 tweets | 34 linkedin
Can banks really win in the payments business of the future? – new Finextra reportCan banks really win in the payments busin...
9012 views comments | 23 tweets | 37 linkedin
SecureKey taps IBM to put identity on the blockchainSecureKey taps IBM to put identity on the...
7465 views comments | 22 tweets | 15 linkedin

Featured job

Six Figure Base + Commission + Stock Options
London

Find your next job