APWG researchers encountered phishers placing thousands of phishing URLs under the same domain, automatically creating pseudo-randomly generated sub-domains (e.g. xxxx.fakedomain.com) or randomly generated directories (e.g. www.fakedomain.com/XXXXX) under a common domain.

Laura Mather, Ph.D., Senior Scientist at MarkMonitor said, "In April the phishers started using the tactic of putting a large numbers of phish URLs on the same domain, similar to what they were doing in late 2006. We have seen cases where the phisher will put thousands of URLs on the same domain. They do this to get around website blocking that Internet Explorer 7.0 and Firefox 2 have deployed to protect consumers from phish sites."

APWG Chairman Dave Jevans lent his interpretation of these statistics, saying, "The anti-phishing industry has been successful in making great progress in the fight against phishing, with increased efficiency in takedowns, blacklists and authentication. However, the latest statistics confirm that the e-crime underground continues to innovate in their techniques and technologies."

Although the financial services sector accounted for nearly 93 percent of all phishing attacks, April was marked by a diversification of attack sectors by electronic crime gangs, including branded social networking outfits, VoIP companies and numerous large web-based email providers. In the contest between phishers and counter-phishers described in the April APWG report's statistics, however, was some good news.

For the first time, the time live for phishing sites dipped below four days - to 3.8 days, reducing by more than 5 percent the duration in which consumers are exposed to phish sites that could deceive them into submitting their user credentials.

"When you are dealing with thousands of servers deployed in phishing attacks, reducing the overall time live for phish sites is very meaningful. Slowly, the windows of opportunity that define the phisher's margin of profit are being closed by better technology and more efficient response protocols and systems," said APWG Secretary General Peter Cassidy.