Phishers use zombie nets to automate attacks

Hackers are achieving new levels of automation using software tools, zombies and bot nets to "vastly increase the potency" of their fraudulent campaigns, according to analysts.

The Anti-Phishing Working Group (APWG) reports that "disturbing" shifts in phishing techniques have been detected, indicating that attacks are becoming increasingly automated and sophisticated.

Starting in early October, APWG analysts witnessed "massive increases" in the amount of phishing sites, mostly outside the US, indicating that a new and powerful set of tools might have been deployed recently.

Moreover, the group noted that the number of sites being hosted on what appear to be compromised PCs has risen to more than 50 per cent.

Dan Hubbard, senior director of security and technology research at security firm Websense, said that some automation, such as the use of a bot network to either send more emails and/or host more sites, would probably be needed to account for the increase.

The number of brands subjected to the largest numbers of phishing attacks rose from four in July to six in October, indicating a broadening of attack subjects, John Thielens, chief technology officer at Tumbleweed Communications, wrote in APWG's Phishing Activity for October report.

The full text of the report is available as a PDF here

See also:

EU zombie army leads the world

Quarter of all PCs infected with zombies located in EU  27 May 2005

Smaller firms unable to resist spam onslaught

Larger companies have better systems in place to fight junk mail  28 Jan 2005

Bot infects thousands of MySQL PCs

Popular database vulnerable to newly discovered attack  28 Jan 2005

2004: the year of the phish

Phishing, spam and viruses at record levels  22 Dec 2004

Bugwatch: Phishers target the network

The latest scams can affect far more people than the original recipient  01 Dec 2004

Phishers target Christmas shoppers

Fake e-commerce sites use devious scam to steal banking details  30 Nov 2004

Gone phishing

Phishing is becoming ever more prevalent and ever more dangerous  29 Nov 2004

Hackers exploit critical Winamp flaw

Media player vulnerability could allow execution of arbitrary code  26 Nov 2004

Phishing leaps fivefold as banks fall prey to attacks

Fraudsters looking forward to a very merry Christmas  23 Nov 2004

Stop spam from filtering through

As the volume of unsolicited email grows, filtering solutions must become more sophisticated to sort the wheat from the chaff  22 Nov 2004

Lashings of seasonal spam

Many users may find their inboxes uncomfortably full come Christmas day  19 Nov 2004

Phishing scam forces NatWest services offline

Bank suspend elements of its online service to protect customers  17 Nov 2004

E-commerce faces a crisis of trust

Online trade could be irreparably damaged unless firms do more to combat scams  17 Nov 2004

Trojan mugs UK web banking customers

Banker-AJ Trojan sends passwords and screenshots to remote hackers  11 Nov 2004

Security

The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack.  15 Apr 2004

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!