Advertisement
Promo

Security threats Toolkit

Online shopping increase provides bait for phishers

Will Sturgeon silicon.com

Published: 29 Jul 2004 14:40 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Phishing is on the increase and the phenomenal rise of the crime shows little sign of slowing -- especially with more and more of us moving online to use services such as banking and shopping.

According to research from VeriSign, the increase in the number of people transacting online -- up 13.2 per cent on last year -- means an increase in the number and variety of cybercrimes being committed -- with phishing the highest priority concern currently.

Phishing scams typically involve the receipt of an email which attempts to solicit sensitive data -- such as bank account details. Often it will carry the branding of specific banks and ape very closely the appearance of a bank's Web site or own email communications. For the unwary consumer spotting the minute differences can be tricky.

According to VeriSign, 93 percent of phishing emails that it studied were sent from forged or spoofed email addresses, which at first glance may appear to be genuine.

Just 5 percent of phishing emails came from sites making no attempt to disguise their destination, while 2 percent came from 'cousin' sites, which closely mimic the company site they are seeking to imitate but perhaps differ by a few characters. This suggests a general trend of phishers 'raising the bar'.

Paul Wood, chief information security analyst at MessageLabs, said the last six months has seen an increase in the sophistication of phishing emails but warned that a lack of awareness and end user education is also responsible for the continued success of even quite crude phishing attacks.

"As with viruses, people have been told time and time again not to open these emails and not to click on links and attachments but still they continue to do so," said Wood.

Such a lack of awareness means continued success for phishers and means they will most likely keep plying their trade for some time to come, according to Wood.

More likely to bring about the end of phishing emails is a move towards more covert forms of harvesting data -- such as spyware which requires even less end-user involvement.

Another problem in policing such crimes is the geographic spread of scammers and the need for careful cross border co-operation.

Although victims could be anywhere in the world it was crooks in China, Korea and the US who originated the most scams, according to VeriSign.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
100 out of 183 people found this useful


Full Talkback thread

0 comments


Company/Topic Alerts

Create a new alert from the list below:





Video icon

Video

Sentry Posts Blog

Civil liberties groups attack file-sha...

Civil liberties and digital rights organisations have strongly criticised Lord Mandelson's Digital Economy Bill. Liberty said in a position paper on Tuesday that the bill, part of... More

Post a comment

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters