Forest Global Training Partners

Cyber Risks · Krebs on Security

Teach a Man to Phish…

Summary: PhishLabs registered an expiring domain referenced by a phishing kit's backdoor and used it to track 1,767 hacked sites seeded with that kit over roughly 15 months. The company attributed about 1,100 of those sites to a single man in Lagos, Nigeria, who set up two to three new phishing sites daily, with founder John LaCour estimating more than $4 million a year in proceeds from conservative assumptions of 10 stolen banking credentials per phish at $500 in losses each.

Bottom line: One operator running a 9-to-5 schedule across roughly 1,100 sites is the small-timer in this account; the Anti-Phishing Working Group attributed about two-thirds of all phishing attacks in the second half of last year to a single organized gang, Avalanche, which experts also tie to the Zeus Trojan distribution behind attacks on small businesses.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related