OpenDNS and Google services are designed to block phishing sites and deliver websites faster.
Casting their nets as wide as possible, phishing sites are using pop-ups to beg for personal information.
FORBES: Cyber Crooks See Huge Opportunity In Japan's Tragedy
The main focus of the hackers: setting up phony Japan disaster domains that are actually secret phishing sites.
FORBES: Cyber Crooks See Huge Opportunity In Japan's Tragedy
"They've taken the tools used to keep the Internet stable and applied them to keeping their phishing sites stable, " Mather says.
For instance, the company is currently assembling a list of certified businesses to create an alert system that distinguishes between phishing sites and legitimate sites.
Working with the registries that control and distribute domain names, the APWG is crafting a system that would accredit security organizations to act as the Web's watchdogs, identifying phishing sites.
In February Georgia Tech researchers found that one-fifth of the servers they checked were still vulnerable to the hack and 2% had been used to redirect traffic, often to phishing sites.
Holder said that sites like these are not necessarily phishing sites, but that at some point they sold their data to another entity and that it eventually made its way into criminal hands.
Tracing the physical location of phishing sites that impersonated pages from U.K.-based Barclay and Halifax banks, F-secure's researchers found that they were hosted on the same Russian server used for distributing Storm in recent weeks.
Many bot-herders are advanced techies operating in developing countries with large populations such as Russia or China, sending out attacks with names such as Canadian Pharmacy, hiding phishing links in images and viruses in spreadsheets, and registering a series of phishing sites with similar names.
They've worked to teach users to spot and avoid the "phishing" sites that spread malicious software and steal bank codes.
That loophole lets cybercriminals host "phishing" sites, in which they impersonate legitimate pages and ask for users' bank codes or other sensitive information.
Unlike phishing or other fraud sites, drug commerce sites can't be quickly identified as illegal and removed by Web hosts.
By ensuring that the websites of banks appear first, the government hopes to limit the numbers of people falling for phishing scams and visiting the fake sites.
F-secure's researchers also report the software used to mimic Barclay's and Halifax's banking sites is a primitive phishing kit from 2004--a sign that Storm's innovative creators are renting out their real estate to less savvy cyber-criminals.
More difficult are the phishing attempts that direct users to spoof sites that can be difficult to distinguish from the real thing.
By posting e-mail addresses on public sites as targets for each others' phishing e-mails, gangs of scammers are able to track each others' newest tricks and keep up with the latest innovations.
Cybercriminals are employing phishing and malware attacks for a number of reasons, including trying to redirect users to sites where profit is fueled by the number of visitors.
In addition to turning your browser into a speed demon, this optional setting also uses Safe Browsing, which checks the sites you're visiting against a list of potential threats for malware and phishing.
Web sites are layering on more security to fight the common Web scam known as phishing, in which spammers lure people into logging on to a bogus site and steal their user names and passwords.
This year saw the widespread adoption of a tactic for hiding malware delivery sites known as "fast flux, " says Laura Mather, a researcher at the Anti-Phishing Working Group committee and a senior scientist with digital brand protection firm MarkMonitor.
Typical phishing tactics include sending fraudulent e-mails to lure users to look-a-like banking or government Web sites that convince them to give up their bank codes or other sensitive information.
应用推荐