20 August 2017
Find out more

Record levels of phishing URLs detected in April

31 May 2007  |  4121 views  |  0 Source: Anti-Phishing Working Group

The Anti-Phishing Working Group (APWG) announced today that the number of phishing URLs deployed by electronic crime gangs detected by the APWG rose to 55643 in April, up 48 percent from the previous high in October 2006 and more than 166 percent higher than the number encountered in March.

APWG researchers encountered phishers placing thousands of phishing URLs under the same domain, automatically creating pseudo-randomly generated sub-domains (e.g. xxxx.fakedomain.com) or randomly generated directories (e.g. www.fakedomain.com/XXXXX) under a common domain.

Laura Mather, Ph.D., Senior Scientist at MarkMonitor said, "In April the phishers started using the tactic of putting a large numbers of phish URLs on the same domain, similar to what they were doing in late 2006. We have seen cases where the phisher will put thousands of URLs on the same domain. They do this to get around website blocking that Internet Explorer 7.0 and Firefox 2 have deployed to protect consumers from phish sites."

APWG Chairman Dave Jevans lent his interpretation of these statistics, saying, "The anti-phishing industry has been successful in making great progress in the fight against phishing, with increased efficiency in takedowns, blacklists and authentication. However, the latest statistics confirm that the e-crime underground continues to innovate in their techniques and technologies."

Although the financial services sector accounted for nearly 93 percent of all phishing attacks, April was marked by a diversification of attack sectors by electronic crime gangs, including branded social networking outfits, VoIP companies and numerous large web-based email providers. In the contest between phishers and counter-phishers described in the April APWG report's statistics, however, was some good news.

For the first time, the time live for phishing sites dipped below four days - to 3.8 days, reducing by more than 5 percent the duration in which consumers are exposed to phish sites that could deceive them into submitting their user credentials.

"When you are dealing with thousands of servers deployed in phishing attacks, reducing the overall time live for phish sites is very meaningful. Slowly, the windows of opportunity that define the phisher's margin of profit are being closed by better technology and more efficient response protocols and systems," said APWG Secretary General Peter Cassidy.

Comments: (0)

Comment on this story (membership required)

Related blogs

Create a blog about this story (membership required)
visit www.niceactimize.comvisit www.dorsum.eudownload the paper now

Top topics

Most viewed Most shared
Mobile contactless spending accelerating in UKMobile contactless spending accelerating i...
9813 views comments | 23 tweets | 23 linkedin
Norwegian banks and startups form fintech clusterNorwegian banks and startups form fintech...
8324 views comments | 19 tweets | 23 linkedin
RBS to bring Silicon Valley to EdinburghRBS to bring Silicon Valley to Edinburgh
7891 views comments | 10 tweets | 7 linkedin
hands typing furiouslyWhy Is Risk Analytics Important?
7667 views 0 | 2 tweets | 1 linkedin
Barclays pairs banking data with third party apps for SmartBusiness DashboardBarclays pairs banking data with third par...
7149 views comments | 15 tweets | 13 linkedin

Featured job

Competitive
London, UK (or flexible)

Find your next job