21 July 2018
Visit www.avoka.com

Record levels of phishing URLs detected in April

31 May 2007  |  4222 views  |  0 Source: Anti-Phishing Working Group

The Anti-Phishing Working Group (APWG) announced today that the number of phishing URLs deployed by electronic crime gangs detected by the APWG rose to 55643 in April, up 48 percent from the previous high in October 2006 and more than 166 percent higher than the number encountered in March.

APWG researchers encountered phishers placing thousands of phishing URLs under the same domain, automatically creating pseudo-randomly generated sub-domains (e.g. xxxx.fakedomain.com) or randomly generated directories (e.g. www.fakedomain.com/XXXXX) under a common domain.

Laura Mather, Ph.D., Senior Scientist at MarkMonitor said, "In April the phishers started using the tactic of putting a large numbers of phish URLs on the same domain, similar to what they were doing in late 2006. We have seen cases where the phisher will put thousands of URLs on the same domain. They do this to get around website blocking that Internet Explorer 7.0 and Firefox 2 have deployed to protect consumers from phish sites."

APWG Chairman Dave Jevans lent his interpretation of these statistics, saying, "The anti-phishing industry has been successful in making great progress in the fight against phishing, with increased efficiency in takedowns, blacklists and authentication. However, the latest statistics confirm that the e-crime underground continues to innovate in their techniques and technologies."

Although the financial services sector accounted for nearly 93 percent of all phishing attacks, April was marked by a diversification of attack sectors by electronic crime gangs, including branded social networking outfits, VoIP companies and numerous large web-based email providers. In the contest between phishers and counter-phishers described in the April APWG report's statistics, however, was some good news.

For the first time, the time live for phishing sites dipped below four days - to 3.8 days, reducing by more than 5 percent the duration in which consumers are exposed to phish sites that could deceive them into submitting their user credentials.

"When you are dealing with thousands of servers deployed in phishing attacks, reducing the overall time live for phish sites is very meaningful. Slowly, the windows of opportunity that define the phisher's margin of profit are being closed by better technology and more efficient response protocols and systems," said APWG Secretary General Peter Cassidy.

Comments: (0)

Comment on this story (membership required)

Related blogs

Create a blog about this story (membership required)
Visit http://go.jumio.com/finextraAdVisit iliad-solutions.com/Visit info.nice.com

Who is commenting?

Top topics

Most viewed Most shared
Calmejane quits Lloyds Bank to join SocGenCalmejane quits Lloyds Bank to join SocGen
13405 views comments | 6 tweets | 8 linkedin
Hong Kong plans September go-live for blockchain-based trade financeHong Kong plans September go-live for bloc...
11047 views comments | 9 tweets | 17 linkedin
Mastercard enlists Worldpay to push Vocalink's Pay by Bank appMastercard enlists Worldpay to push Vocali...
10017 views 19 comments | 15 tweets | 30 linkedin
IBM to test dollar-pegged 'stablecoin'IBM to test dollar-pegged 'stablecoin'
7303 views comments | 4 tweets | 14 linkedin
Bringing about new systems and faster payments globallyBringing about new systems and faster paym...
7098 views comments | 2 tweets | 7 linkedin

Featured job

Competitive base, double ote, benefits
New York City, NY USA

Find your next job