According to year-end 2005 data from research firm Netcraft, eBay and PayPal were the top phishing targets representing 62 percent of attacks.
Netcraft's data is derived from its Toolbar, which aims to block and or help users identify which sites are legitimate and which are phishing attempts. Netcraft claims that its toolbar, in a little over a year of existence, has blocked more than 41,000 confirmed phishing URLs.
Web security firm GeoTrust also has an anti-phishing toolbar and has eBay and PayPal in its top three phishing targets. GeoTrust spokesperson Joan Lockhart said that Citibank rounds out the top three with Amazon becoming a really close fourth.
Other financial institutions also need to worry. Lockhart noted that GeoTrust is seeing phishers going after a broader range of financial institutions including credit and insurance companies, not just the top-name banks.
Phishers are also now using more complex schemes in order to lure victims. Phishing e-mails now typically contain multiple URLs in them according to Lockhart.
Netcraft's study noted the filenames of the phished URLs often include the brand name of the targeted financial institution.
The malicious URLs use some form of deception that could include a misspelling or a hyphenated phrase to confuse victims. Phishers also made use of common eBay and PayPal strings such as "eBayISAPI" and "wbscr" within the URL that makes the address appear legitimate.
Phishers are apparently also making it hard to be shut down. Lockhart said that some phishers have been moving the sites from one fraudulent hosting location to another. The site is just moved so that it can reappear in another country, on another server, within minutes.
It's not quite as easy as you'd think to actually spot a phishing attempt. A recent study from MailFrontier reported that only 4 percent of users could spot a phished e-mail 100 percent of the time.
This article originally appeared on InternetNews.com.
|Do you have a comment or question about this article or other e-commerce topics in general? Speak out in the SmallBusinessComputing.com E-Commerce Forum. Join the discussion today!|
Improve Patient Engagement and Profitability: Embrace Consumerism and New Technology Date: Tuesday, November 11, 2014 Time: 11:30 AM Eastern Standard Time Duration: 1 hour, 30 minutes Legislation isn't the only thing triggering...
BEST PRACTICE WEBINAR: Critical Requirements for Building a Future-Ready Contact Center Wednesday, October 29, 2014 2 PM Eastern / 11 AM Pacific Today, customers expect the agent who answers their call to know they've already sent an...
Top 8 Identity & Access Management Challenges with Your Saas Applications With the exploding adoption of software-as-a-service (SaaS) applications, enterprise IT is fundamentally changing. While on-demand services provide...
From Tree Fort to Fort Knox: 5 Ways Cloud Security Beats What You Have On-Premise Not long ago, security was viewed as one of the biggest obstacles to widespread adoption of cloud-based deployments for enterprise software...