ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Online shopping increase provides bait for phishers

Will Sturgeon silicon.com

Published: 29 Jul 2004 14:40 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Phishing is on the increase and the phenomenal rise of the crime shows little sign of slowing -- especially with more and more of us moving online to use services such as banking and shopping.

According to research from VeriSign, the increase in the number of people transacting online -- up 13.2 per cent on last year -- means an increase in the number and variety of cybercrimes being committed -- with phishing the highest priority concern currently.

Phishing scams typically involve the receipt of an email which attempts to solicit sensitive data -- such as bank account details. Often it will carry the branding of specific banks and ape very closely the appearance of a bank's Web site or own email communications. For the unwary consumer spotting the minute differences can be tricky.

According to VeriSign, 93 percent of phishing emails that it studied were sent from forged or spoofed email addresses, which at first glance may appear to be genuine.

Just 5 percent of phishing emails came from sites making no attempt to disguise their destination, while 2 percent came from 'cousin' sites, which closely mimic the company site they are seeking to imitate but perhaps differ by a few characters. This suggests a general trend of phishers 'raising the bar'.

Paul Wood, chief information security analyst at MessageLabs, said the last six months has seen an increase in the sophistication of phishing emails but warned that a lack of awareness and end user education is also responsible for the continued success of even quite crude phishing attacks.

"As with viruses, people have been told time and time again not to open these emails and not to click on links and attachments but still they continue to do so," said Wood.

Such a lack of awareness means continued success for phishers and means they will most likely keep plying their trade for some time to come, according to Wood.

More likely to bring about the end of phishing emails is a move towards more covert forms of harvesting data -- such as spyware which requires even less end-user involvement.

Another problem in policing such crimes is the geographic spread of scammers and the need for careful cross border co-operation.

Although victims could be anywhere in the world it was crooks in China, Korea and the US who originated the most scams, according to VeriSign.

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
100 out of 182 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:





Related Jobs

SAP FICO Consultant....North East....End User.....No Travel

A SAP FICO Consultant is required to join an End User based in the North East. The company has a heavy focus on the effective development of the SAP ...

SAP BW Consultant - 50K - Global End User

SAP BW consiltant required for global end user based in West London. Purely a technical role with great exposure to BW 3.5 and to take part in ...

Lead ABAP Consultant - SAP ABAP End User - London £70k+

SAP ABAP Principal Consultant / SAP Development Manager My Client is a prestigious globally recognised band with operations across the world and the ...

Sentry Posts Blog

DWP downplays security breach

The Department for Work and Pensions (DWP) has admitted that some of its staff have been forwarding passwords with password protected material. An email that was leaked on the 'Dizzy... More

Post a comment

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Google sponsors open source security p...

Google has announced it is to sponsor oCERT, an open source computer emergency response team. In a blog post on Monday, Google security engineer Will Drewry said that one of the... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation