Phishers Using DNS Tricks
238990
Researchers see a rise in malware that sends spam recipients to DNS servers controlled by phishers.
435599
Clean up campaign bears fruit High-profile websites have cleaned up their act after a small team of security researchers documented how they were unwittingly helping phishing fraudsters.â¦
766035
New round of 'family member' greeting-card spam tricks recipients into visiting malicious Web sites.
20411
New rule creates potential security flaw for domain name transfers.
172876
Domains of several new phishing sites are cropping up with known Storm worm domains. F-Secure researchers think phishers are leasing parts of the larger botnet.
30755
The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.The Anti-Phishing Working Group (APWG) said in a new report Thursday that it saw a sharp rise in November in malware that directs users to DNS (Domain Name System) servers controlled by&#160;phishers.DNS servers play a crucial role in locating Web sites. The servers translate a domain name into an IP (Internet protocol) address, enabling a Web site to be located and accessed through a browser.Often, the phishers will set up their own DNS server that works fine most of the time but can redirect to their own malicious site.Tainting a person&#39;s DNS settings is particularly dangerous since the user probably won&#39;t notice the redirection, the APWG said.&quot;The fraudulent server replies with &#39;good&#39; answers for most domains, however, when they want to direct you to a fraudulent one, they simply modify their name server responses,&quot; the report said.Phishers are also employing malware that modifies an internal PC file called the hosts, which is used to match domain names of Web sites with IP addresses.When a person visits a Web site, the browser checks the hosts to see if it has an IP address for a particular domain name. If the hosts file is corrupted or hijacked, the browser can be directed to fetch a different Web page than the one the user intended to go to.Both attacks -- also known as pharming -- are dangerous, since a user may be typing in the correct URL (uniform resource locator) but be directed to the phishing site.The APWG reported that the overall number of unique phishing sites declined in November, but 178 different brands were targeted, a record number. By comparison, 120 brands were used in phishing attacks in October. The highest previous total was in April 2007, when 174 brands were targeted.More Middle Eastern and European financial services companies were spoofed in phishing schemes, APWG said. The financial services industry is the most targeted for fraud, comprising 93.8 percent of all phishing attacks.&#160;
218321
Super Bowl host sites can infect visitors with malware.
380030
INTERNET banking users beware, there appears to be a new "phishing" method about.   The technique, which avoids most detection systems, works after you log on to an authentic site.
68204
People who use internet networking sites are being warned that they could be at risk of identity theft.
609035
The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.
288407
Recent "phishing" episodes are still often overlooked by tech-savvy users, but a lesson in history shows how entire nations have been fooled.
684816
OK - I actually like and enjoy LDAP, but do not allow that to cloud your judgment. LDAP took much more of my time and effort to learn than Bind and/or DNS. And I recall sitting in front of DNS chapters wondering why we needed another language to do something as easy as mapping a friendly name to an IP address. This jargon stuff has value though such as constraing insomnia.
359299
Much of the trouble centered on phishing, a type of attack where fake Web pages are constructed to harvest log-in details, credit card numbers or other personal information. And, oh yes, spam is back.
448936
You know all about phishing scams, right? You know better than to click on a Web link embedded in an e-mail that purports to be from your bank, or to reply to messages requesting your user name and password. But if you think that's enough to protect yourself, think again.
589272
England-based Netcraft - an Internet services company, has released an anti-phishing toolbar that provides detailed information about the websites you are visiting at all times to help users validate fraudulent URLs.
738631
Fraudsters have developed phishing emails capable of automatically stealing bank log-in details without requiring users to click on a website link, email filtering firm MessageLabs warns.
196490
Web villains post do-it-yourself phishing kits to help any amateur become an online con artist.