17 March 2018

Record levels of phishing URLs detected in April

31 May 2007  |  4185 views  |  0 Source: Anti-Phishing Working Group

The Anti-Phishing Working Group (APWG) announced today that the number of phishing URLs deployed by electronic crime gangs detected by the APWG rose to 55643 in April, up 48 percent from the previous high in October 2006 and more than 166 percent higher than the number encountered in March.

APWG researchers encountered phishers placing thousands of phishing URLs under the same domain, automatically creating pseudo-randomly generated sub-domains (e.g. xxxx.fakedomain.com) or randomly generated directories (e.g. www.fakedomain.com/XXXXX) under a common domain.

Laura Mather, Ph.D., Senior Scientist at MarkMonitor said, "In April the phishers started using the tactic of putting a large numbers of phish URLs on the same domain, similar to what they were doing in late 2006. We have seen cases where the phisher will put thousands of URLs on the same domain. They do this to get around website blocking that Internet Explorer 7.0 and Firefox 2 have deployed to protect consumers from phish sites."

APWG Chairman Dave Jevans lent his interpretation of these statistics, saying, "The anti-phishing industry has been successful in making great progress in the fight against phishing, with increased efficiency in takedowns, blacklists and authentication. However, the latest statistics confirm that the e-crime underground continues to innovate in their techniques and technologies."

Although the financial services sector accounted for nearly 93 percent of all phishing attacks, April was marked by a diversification of attack sectors by electronic crime gangs, including branded social networking outfits, VoIP companies and numerous large web-based email providers. In the contest between phishers and counter-phishers described in the April APWG report's statistics, however, was some good news.

For the first time, the time live for phishing sites dipped below four days - to 3.8 days, reducing by more than 5 percent the duration in which consumers are exposed to phish sites that could deceive them into submitting their user credentials.

"When you are dealing with thousands of servers deployed in phishing attacks, reducing the overall time live for phish sites is very meaningful. Slowly, the windows of opportunity that define the phisher's margin of profit are being closed by better technology and more efficient response protocols and systems," said APWG Secretary General Peter Cassidy.

Comments: (0)

Comment on this story (membership required)

Related blogs

Create a blog about this story (membership required)
Visit www.vasco.comVisit www.nextgenbanking.co.uk

Top topics

Most viewed Most shared
Augmentum Fintech raises £94m in IPOAugmentum Fintech raises £94m in IPO
11710 views comments | 25 tweets | 5 linkedin
Indian fintech sector needs regulatory support to flourishIndian fintech sector needs regulatory sup...
6665 views comments | 8 tweets | 7 linkedin
BIS warns central banks on digital currency issuanceBIS warns central banks on digital currenc...
6410 views comments | 18 tweets | 17 linkedin
Capital One virtual assistant can now issue virtual card numbersCapital One virtual assistant can now issu...
6167 views comments | 12 tweets | 11 linkedin
Starling and TrueLayer integrate for open bankingStarling and TrueLayer integrate for open...
6129 views comments | 13 tweets | 9 linkedin

Featured job

Competitive base + commission + benefits
UK or Germany

Find your next job