Phishers Are Upping Their Game. So Should You.
Summary: PhishLabs reported that nearly 25 percent of all phishing sites in the third quarter of 2017 were hosted on HTTPS domains, almost double the prior quarter and up from under three percent a year earlier. The firm also found that more than 80 percent of poll respondents believed the green padlock indicated a site was legitimate or safe, when it only signifies that traffic between browser and site is encrypted.
Why it matters: Phishers now get SSL certificates free from Let's Encrypt and host most HTTPS attacks against PayPal and Apple on domains they registered themselves, so the lock icon your users were trained to trust no longer distinguishes a real login page from a fake one.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026