Global Security Watch > Phishers Compromise a Huge 81% of Legitimate Websites for Phishing ...

[SPAMfighter News] This technique therefore enables phishers to have free hosting, while efforts to shutdown the hosting account or domain name results in complications as it also adversely affects the site of the legitimate user. Typically, phishing through a site that has been compromised occurs within a subdirectory or on a subsidiary domain, where the operator of the site or visitors cannot easily notice the phishing activity.

Previous [Previous] Phishing Attack Hits Microsoft Outlook Users...

Next [Next] Security boffins: Apple's blowing it...

Some related posts from Technorati and Google.

[Federal Trade Commission (FTC) - Consumer Protection Press Releases] FTC Shuts Down Notorious Rogue Internet Service Provider, 3FN ...: A rogue Internet Service Provider that recruits, knowingly hosts, and actively participates in the distribution of spam, child pornography, and other harmful electronic content has been shut down by a district court judge at the request of the Federal Trade Commission. The ISP’s upstream providers and data centers have disconnected its servers from the Internet.

[24/7 Live Malware Mix] Spam and Phishing Landscape: June 2009: These URLs are often associated with sites that allow users to set up free accounts, including free webhosting accounts, and URLs that are registered and operated by spammers. These URLs are used to promote certain products and services, and spammers often rotate the URLs used in their spam attacks in an effort to evade anti-spam detection.

[CircleID: Featured Blogs] Fight Phishing With Branding: For the past two years, web browsers have supported "green bar" SSL certificates, which are in effect an assertion by whoever sold the SSL certificate that they have verified that certificate holder really is who they say they are. (This increased level of scrutiny is actually about the same as all certificate vendors originally required, but that horse left the barn some time ago.) If we can train users to look for a green bar and distrust web sites without them, it might help them avoid being phished.

[Hack In The Box] Phishing attack targets Microsoft Outlook users :: Hack In The Box ...: A security researcher at the TrendLabs malware blog observed that, unlike phishing attacks that target users of social networking sites or bank websites, login credentials are not enough to hijack an email account - the server information is also required, making this attack less likely to be successful. Many recent phishing attacks have targeted users of sites like Facebook and Twitter, which have proved more effective for cybercriminals attempting to steal personal information.

[Web Hosting Talk - Dedicated Hosting Offers] HostGator being targeted by Australian phishing scam? - Web ...: I just find it really weird or a big co-incidence that I am getting hosting related ones and not other names, mentioned in the phishing email. If you take a look on the news article I posted they have a screenshot of the same sort of email with a dating network iFriends name attached to the attack.

[Hack In The Box] Australia in top 10 for phishing attacks :: Hack In The Box ...: The number of hosted phishing attacks in Australia jumped up, placing us in the top 10 for country hosted attacks. The United States topped the list, hosting 43 percent of the world’s phishing attacks, while the United Kingdom ranked 2nd, hosting 17 percent of the world’s total attacks.

[Counter Measures] Phish Twice a Day (Spam on the Side) - The Twitter Diet » Counter ...: UPDATE: Twitter seem to have deleted all the phishing posts in compromised accounts and reset the passwords. At 00:36 GMT today, the below notification mail was sent out to all affected account holders.

[Docuticker] Docuticker » Blog Archive » FTC Shuts Down Notorious Rogue ...: A rogue Internet Service Provider that recruits, knowingly hosts, and actively participates in the distribution of spam, child pornography, and other harmful electronic content has been shut down by a district court judge at the request of the Federal Trade Commission. The ISP’s upstream providers and data centers have disconnected its servers from the Internet.

[Avira - TechBlog] Avira - TechBlog » Blog Archive » Malware and Phishing statistics ...: Our statistics show that 14.43% from the Phishing and 15.04% from the Malware URLs (for which we have geo IP information) are hosted on servers located in Germany. The numbers of malicious URLs which are advertised in Germany (not necessarily hosted) can’t be computed, since no one is able to count all the emails which contain the URLs.

[Switched] Phishing Scams Move From Facebook to Twitter: After collecting a users' usernames and passwords, the phishers pass them back to Twitter where the duped tweeters find a host of new attractive women following them. Clicking through to links on those accounts lead users to X-rated dating .

[Blog - Cheap Hosting Reviews, Comments, Rating...] Unacceptable use on Just Host shared hosting | Blog - Cheap ...: * Hosting, storing, or distributing child pornography. If any such content is found and brought to our attention, the proper law enforcement agencies will be notified.

[Security Response Weblog] Static Phishing Kit Pretends to be Dynamic - Online Fraud - STN ...: a couple of usernames and passwords is no longer enough information, since other pieces of data are often required to accomplish the fraud (for example, the user’s disposal password or the number of a credit card). Due to the amount of data that needs to be collected and the requirement for necessary steps in mimicking the legitimate site, a type of dynamic behavior has to be introduced by the attackers to allow input data to flow from one page to the other before being finally submitted to the “Form to Email" script.

[mxlab - all about anti virus and anti spam] Phishing PayPal email includes web form « mxlab - all about anti ...: caught our attention because of the fact that it included a complete HTML form inside the email. The phishing is regarding a refund request and the amount would be transferred to your credit card within 5 or 7 days.

[Quoderat] Megginson Technologies: Quoderat » Blog Archive » ohare-airport ...: We are proud to announce the launch of the new Chicago O’Hare =International Airport website www.ohare-airport.org. It provides =comprehensive real time flight information on arrivals, departures and =delays, terminals and maps, parking, transportation, directions, food =and shopping, hotels, etc.

Reflected tags on Technorati: Blog, , , , , ,