Half of all Phishing Sites Now Have the Padlock
Summary: PhishLabs data shows 49 percent of all phishing sites in the third quarter of 2018 carried the padlock icon and began with https://, up from 25 percent a year earlier and 35 percent in the second quarter. The https:// designation only means traffic between browser and site is encrypted, not that the site is legitimate, and a PhishLabs survey found more than 80 percent of respondents believed the green lock indicated a site was legitimate or safe.
Key Takeaway: More than 80 percent of users still read the padlock as proof of legitimacy, so a phisher can buy a free certificate and inherit that trust - Krebs demonstrates a live Bibox credential-phishing page using an internationalized domain name that renders convincingly in Firefox.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026