Phishing
Phishing uses faked emails or other messages, spoofed to appear to come from anywhere from your bank, PayPal, to your email provider, designed to entice you to reveal your account details to the scammer.
- What is Phishing?
- Anti-Spoofing Tools
- Corporate Phishing Countermeasures
- Phishing Archives
- Other Identity Theft
What is Phishing?
Phishing Basics
Anti-Phishing - www.antiphishing.org/
Beginner's Guide to Phishing - www.millersmiles.co.uk/identitytheft/Article-Part1-Beginners-Guide-to-Phishing.php
Phishing Scams, Emails and Websites - www.fraudwatchinternational.com/phishing-fraud/phishing-home/
PhishCop - www.phishcop.net/
Phishing - en.wikipedia.org/wiki/Phishing
Phishing Explained - banksafeonline.org.uk/phishing_explained.html
What is a phishing scam? - www.microsoft.com/protect/yourself/phishing/identify.mspx
Phishinginfo.org - www.phishinginfo.org/
OnGuard Online — phishing - www.onguardonline.gov/topics/phishing.aspx
Avoiding Phishing
How Not to Get Hooked by a 'Phishing' Scam - www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.shtm
How to Protect Yourself from Phishing - www.fraudwatchinternational.com/phishing-fraud/phishing-protection/
Avoiding Social Engineering and Phishing Attacks - www.us-cert.gov/cas/tips/ST04-014.html
Simple steps to avoid being phished - www.sophos.com/security/best-practice/phishing.html
Spoof Tutorial - pages.ebay.com/education/spooftutorial/
Phishing Awareness Tests
SonicWALL Phishing IQ Test (was MailFrontier) - www.sonicwall.com/phishing/
Test your Phishing Skills - www.netriplex.com/phishfraud/phishing_test.aspx
Phishing – Quiz - www.contentverification.com/phishing/quiz/
Paypal — can you spot phishing? - https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/securitycenter/antiphishing/CanYouSpotPhishing-outside
PhishMe - phishme.com/
Phishing In Depth
Know Your Enemy: Phishing - www.honeynet.org/papers/phishing/
Banking Scam Revealed - www.securityfocus.com/infocus/1745
Anatomy of a Phishing Email - www.ceas.cc/papers-2004/114.pdf
Steps to ID spoofed web sites - support.microsoft.com/default.aspx?scid=kb;%5Bln%5D;833786
Plugging the “phishing” hole - www.law.duke.edu/journals/dltr/articles/2005dltr0006.html
The economy of phishing - firstmonday.org/htbin/cgiwrap/bin/ojs/index.php/fm/article/view/1272/1192
The Phishing Guide - www.ngssoftware.com/papers/NISR-WP-Phishing.pdf
Spear-Phishing – New Angles On An Old Game - www.cafeid.com/art-spear.shtml
Trust Management for Humans - www.waterken.com/dev/YURL/Name/
Phishing Research at IU - www.indiana.edu/~phishing/
Analyzing a “Phishing” Scam Attempt - www.cromwell-intl.com/security/security-scam-analysis.html
Code Fish Spam Watch - www.codephish.info/
Phishing Attack Techniques - www.contentverification.com/attacks.html
Why Phishing Works - people.seas.harvard.edu/~rachna/papers/why_phishing_works.pdf
Phishing Web Site Methods - www.fraudwatchinternational.com/phishing-fraud/phishing-web-site-methods/
Phishing Defense against IDN Address Spoofing Attacks - www.quero.at/papers/idn_spoofing.pdf
Authentication: The Pitfall Of Two Factor Authentication - www.networksec.org/Articles/AuthenticationThePitfallOfTwoFactorAuthentication
Phishing social networking sites - ha.ckers.org/blog/20070508/phishing-social-networking-sites/
Breaking out of the Browser to Defend Against Phishing Attacks - www.ceas.cc/2008/papers/ceas2008-paper-58.pdf
A Profitless Endeavor: Phishing as Tragedy of the Commons - research.microsoft.com/en-us/um/people/cormac/Papers/PhishingAsTragedy.pdf
Proposed expansion of top-level domains generates security concerns - searchfinancialsecurity.techtarget.com/news/article/0,289142,sid185_gci1362268,00.html
Phishing Statistics
RSA Security Online Fraud Intelligence Report - www.rsa.com/phishing_reports.aspx
Phishiest Countries - toolbar.netcraft.com/stats/countries
PhishTank stats - www.phishtank.com/stats.php
MessageLabs phishing statistics - www.messagelabs.co.uk/intelligence.aspx
Anti-Spoofing Tools
- Reviews of Anti-Spoofing Tools
- Anti-Spoofing Browser Tools
- Anti-Spoofing Email Tools
- Phishing blacklists
Reviews of Anti-Spoofing Tools
Gone Phishing: Evaluating Anti-Phishing Tools for Windows - www.3sharp.com/projects/antiphish/
Firefox 2 Phishing Protection Effectiveness Testing - www.mozilla.org/security/phishing-test.html
Phinding Phish: An Evaluation of Anti-Phishing Toolbars - lorrie.cranor.org/pubs/toolbars.html
Protect Yourself With an Antiphishing Toolbar - www.pcworld.com/article/125739-1/article.html
Anti-Spoofing Browser Tools
Toolbars for Internet Explorer and Firefox can help distinguish between fake phishing sites and real banking sites.
SpoofStick - www.spoofstick.com/
TrustBar - trustbar.mozdev.org/
Netcraft Toolbar - toolbar.netcraft.com/
eBay Toolbar - pages.ebay.com/ebay_toolbar/
CallingID - www.callingid.com/Default.aspx
Phishing – Browser-based Defences - www.gerv.net/security/phishing-browser-defences.html
Trust Toolbar - www.trusttoolbar.com/
SpoofGuard - crypto.stanford.edu/SpoofGuard/
PwdHash - crypto.stanford.edu/PwdHash/
McAfee SiteAdvisor - www.siteadvisor.com/
RoboForm - www.roboform.com/anti-phish.html
SiteHound - www.firetrust.com/en/products/sitehound
GralicWrap - www.gralicwrap.com/
Google Safe Browsing for Firefox - www.google.com/tools/firefox/safebrowsing/index.html
Anti-Phishing Alarm in Deep Net Explorer - www.deepnetexplorer.com/tour/tour_04.asp
VerificationEngine - www.contentverification.com/
Phishing Defense against IDN Address Spoofing Attacks - www.quero.at/papers/idn_spoofing.pdf
OpenDNS - www.opendns.com/
Compete Toolbar - home.compete.com/
Fraud Shield - www.fraudwatchinternational.com/fraud_shield/product-features/
Site Safe - www.site-safe.org/
Foxie Firewall - www.getfoxie.com/feature/firewall/
WOT - www.mywot.com/
URL Fixer Firefox extension - www.chrisfinke.com/addons/url-fixer/
Norton Internet Security - www.symantec.com/norton/products/index.jsp
PhishTank SiteChecker - phishtanksitechecker.com/
TrendProtect - www.trendsecure.com/portal/en-US/tools/security_tools/trendprotect
Finjan SecureBrowsing - addons.mozilla.org/en-US/firefox/addon/4892
ID AntiPhishing - www.idsecuritysuite.com/products/id-antiphishing.htm
TrustPlus - www.trustplus.com/
ScrubIT - www.scrubit.com/
Anti-Spoofing Email Tools
TrustedSource Toolbar - research.ciphertrust.com/tools.php?tool=toolbar
Phishing Detector v.1.0 For OE - www.fairtradeauthority.com/phishing_detector.php
Iconix eMail ID - www.iconix.com/
Delphish - www.delphish.com/
Phishing blacklists
Phishing website IP blacklists
Corporate Phishing Countermeasures
Corporate Authentication Phishing Countermeasures
Simple web-based techniques can be used by companies to give assurance to customers that they are on the right website.
Identity Cues - www.greenarmor.com/identity_cues.shtml
Entrust IdentityGuard - www.entrust.com/strong-authentication/identityguard/
RSA Consumer Solutions - www.rsa.com/node.aspx?id=3017 - was PassMark and Cyota FraudAction
PortWise - www.portwise.com/
ActivIdentity - www.actividentity.com/
WiKID HTTPS Mutual Authentication - www.wikidsystems.net/
Active Cookies - www.ravenwhite.com/technology.html
Digital Resolve Trusted Server - www.digital-resolve.net/solutions/trusted_server.html
Ceelox ID Online - www.ceelox.com/ceeloxidonline.html
Corporate Management Phishing Countermeasures
How not to look like a Phish - www.truste.org/pdf/How_Not_Look_Like_Phish.pdf
FSTC Counter-Phishing Initiative - www.fstc.org/scom/security_scom.php
Phish Report Network - www.phishreport.net/
MarkMonitor's Fraud Protection - www.markmonitor.com/
RSA Security FraudAction - www.rsa.com/node.aspx?id=3020
Phishing, Identity Theft and Bank Fraud Detection - audited.netcraft.com/bank-fraud-detection
Consumer Protection Advice Service - sharecube.com/consumer-advice-alert-service.html
Strider URL Tracer with Typo-Patrol - research.microsoft.com/en-us/um/redmond/projects/strider/urltracer/
Nameprep - nameprep.org/
Internet Identity - www.internetidentity.com/
Digital Resolve Fraud Analyst - www.digital-resolve.net/solutions/fraudanalyst.html
Sophos PhishAlert - www.sophos.com/products/enterprise/alert-services/phishalert.html
Support Intelligence REACT - support-intelligence.com/
Melbourne IT Digital Brand Services - www.melbourneitdbs.com/online-brand-infringement/anti-phishing-service.php
Netcraft Phishing Site Feed - news.netcraft.com/phishing-site-feed
Pramana's HumanPresent - www.pramana.com/
iovation Device Manager and Device Risk - www.iovation.com/
41st Parameter - www.the41st.com/
Fraud Detection on KDNuggets - www.kdnuggets.com/solutions/fraud-detection.html
Phishing Archives
Phishing Archive - www.antiphishing.org/phishing_archive/phishing_archive.html
Examples of Phishing Emails - banksafeonline.org.uk/phishing_examples.html
Millersmiles Honeytrap - honeytrap.millersmiles.co.uk/
Phishing Scams by Targeted Company - www.millersmiles.co.uk/scams.php
Phish tracker - www.dslreports.com/phishtrack
Open Phishing Database - opdb.berlios.de/
Phishing Alerts - www.fraudwatchinternational.com/phishing/
Internet Defence Phishery - phishery.internetdefence.net/
Other Identity Theft
Identity Theft Prevention and Survival - www.identitytheft.org/
FTC ID Theft - www.ftc.gov/bcp/edu/microsites/idtheft/
SSA Identity Theft - www.ssa.gov/pubs/idtheft.htm
Identity Theft and Fraud - www.usdoj.gov/criminal/fraud/idtheft.html
RCMP Identify Theft - www.rcmp-grc.gc.ca/scams-fraudes/id-theft-vol-eng.htm
Email Identity Theft - www.albionresearch.com/disaster/email_identity.php
Identity Theft Resources - www.privacyrights.org/identity.htm
Fight Identity Theft - www.fightidentitytheft.com/
Identity Theft and Protecting Your Credit - www.creditinfocenter.com/identity/
ID Theft Services - idfraud.org/
Fake Credit Report Sites - www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt130.shtm
Home Office Identity Fraud Steering Committee - https://www.identitytheft.org.uk/
Identity Fraud Consumer Guide - https://www.identitytheft.org.uk/
Social Security Number Fraud - www.ssnfraud.info/
Protecting Personal Information - www.fact-sheets.com/privacy-security/protecting_personal_info/
OneGuard Online — ID Theft - www.onguardonline.gov/topics/identity-theft.aspx
This work is licensed under a Creative Commons License. SPAM is a trademark of Hormel Foods.
Page last updated: 02-Jan-2010