Phishing
Phishing uses faked emails or other messages, spoofed to appear to come from anywhere from your bank, PayPal, to your email provider, designed to entice you to reveal your account details to the scammer.
- What is Phishing?
- Anti-Spoofing Tools
- Corporate Phishing Countermeasures
- Phishing Archives
- Other Identity Theft
What is Phishing?
Phishing Basics
Anti-Phishing - www.antiphishing.org/
Beginner's Guide to Phishing - www.millersmiles.co.uk/identitytheft/Article-Part1-Beginners-Guide-to-Phishing.php
Phishing Scams, Emails and Websites - www.fraudwatchinternational.com/phishing-fraud/phishing-home/
PhishCop - www.phishcop.net/
Phishing - en.wikipedia.org/wiki/Phishing
Phishing Explained - banksafeonline.org.uk/phishing_explained.html
What is a phishing scam? - www.microsoft.com/protect/yourself/phishing/identify.mspx
Phishinginfo.org - www.phishinginfo.org/
OnGuard Online — phishing - onguardonline.gov/phishing.html
Avoiding Phishing
How Not to Get Hooked by a 'Phishing' Scam - www.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.shtm
Anti-Phishing Tips You Should Not Follow - www.hexview.com/sdp/node/24
How to Protect Yourself from Phishing - www.fraudwatchinternational.com/phishing-fraud/phishing-protection/
Avoiding Social Engineering and Phishing Attacks - www.us-cert.gov/cas/tips/ST04-014.html
Simple steps to avoid being phished - www.sophos.com/security/best-practice/phishing.html
Spoof Tutorial - pages.ebay.com/education/spooftutorial/
Phishing Awareness Tests
SonicWALL Phishing IQ Test (was MailFrontier) - www.sonicwall.com/phishing/
Test your Phishing Skills - www.netriplex.com/phishfraud/phishing_test.aspx
Phishing – Quiz - www.contentverification.com/phishing/quiz/
Paypal — can you spot phishing? - https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/securitycenter/antiphishing/CanYouSpotPhishing-outside
Phishing In Depth
Know Your Enemy: Phishing - www.honeynet.org/papers/phishing/
Banking Scam Revealed - www.securityfocus.com/infocus/1745
Anatomy of a Phishing Email - www.ceas.cc/papers-2004/114.pdf
Steps to ID spoofed web sites - support.microsoft.com/default.aspx?scid=kb;%5Bln%5D;833786
Plugging the “phishing” hole - www.law.duke.edu/journals/dltr/articles/2005dltr0006.html
The economy of phishing - www.firstmonday.org/issues/issue10_9/abad/
The Phishing Guide - www.ngssoftware.com/papers/NISR-WP-Phishing.pdf
Spear-Phishing – New Angles On An Old Game - www.cafeid.com/art-spear.shtml
Trust Management for Humans - www.waterken.com/dev/YURL/Name/
Phishing Research at IU - www.indiana.edu/~phishing/
Analyzing a “Phishing” Scam Attempt - www.cromwell-intl.com/security/security-scam-analysis.html
Code Fish Spam Watch - www.codephish.info/
Phishing Attack Techniques - www.contentverification.com/attacks.html
Why Phishing Works - people.seas.harvard.edu/~rachna/papers/why_phishing_works.pdf
Phishing Web Site Methods - www.fraudwatchinternational.com/phishing-fraud/phishing-web-site-methods/
Phishing Defense against IDN Address Spoofing Attacks - www.quero.at/papers/idn_spoofing.pdf
Authentication: The Pitfall Of Two Factor Authentication - www.networksec.org/Articles/AuthenticationThePitfallOfTwoFactorAuthentication
Phishing social networking sites - ha.ckers.org/blog/20070508/phishing-social-networking-sites/
Phishing Statistics
RSA Security Online Fraud Intelligence Report - www.rsa.com/phishing_reports.aspx
Phishiest Countries - toolbar.netcraft.com/stats/countries
PhishTank stats - www.phishtank.com/stats.php
MessageLabs phishing statistics - www.messagelabs.co.uk/intelligence.aspx
Anti-Spoofing Tools
- Reviews of Anti-Spoofing Tools
- Anti-Spoofing Browser Tools
- Anti-Spoofing Email Tools
- Phishing blacklists
Reviews of Anti-Spoofing Tools
Gone Phishing: Evaluating Anti-Phishing Tools for Windows - www.3sharp.com/projects/antiphish/
Firefox 2 Phishing Protection Effectiveness Testing - www.mozilla.org/security/phishing-test.html
Phinding Phish: An Evaluation of Anti-Phishing Toolbars - www.cylab.cmu.edu/files/cmucylab06018.pdf
Protect Yourself With an Antiphishing Toolbar - www.pcworld.com/article/125739-1/article.html
Anti-Spoofing Browser Tools
Toolbars for Internet Explorer and Firefox can help distinguish between fake phishing sites and real banking sites.
SpoofStick - www.spoofstick.com/
TrustBar - trustbar.mozdev.org/
TrustWatch - www.trustwatch.com/
Netcraft Toolbar - toolbar.netcraft.com/
eBay Toolbar - pages.ebay.com/ebay_toolbar/
CallingID - www.callingid.com/Default.aspx
Phishing – Browser-based Defences - www.gerv.net/security/phishing-browser-defences.html
Trust Toolbar - www.trusttoolbar.com/
SpoofGuard - crypto.stanford.edu/SpoofGuard/
PwdHash - crypto.stanford.edu/PwdHash/
McAfee SiteAdvisor - www.siteadvisor.com/
RoboForm - www.roboform.com/anti-phish.html
SiteHound - www.firetrust.com/en/products/sitehound
GralicWrap - www.gralicwrap.com/
Google Safe Browsing for Firefox - www.google.com/tools/firefox/safebrowsing/index.html
Anti-Phishing Alarm in Deep Net Explorer - www.deepnetexplorer.com/tour/tour_04.asp
VerificationEngine - www.contentverification.com/
Phishing Defense against IDN Address Spoofing Attacks - www.quero.at/papers/idn_spoofing.pdf
OpenDNS - www.opendns.com/
Compete Toolbar - home.compete.com/
Fraud Shield - www.fraudwatchinternational.com/fraud_shield/product-features/
Site Safe - www.site-safe.org/
Foxie Firewall - www.getfoxie.com/feature/firewall/
WOT - www.mywot.com/
URL Fixer Firefox extension - www.chrisfinke.com/addons/url-fixer/
Norton Internet Security - www.symantec.com/norton/products/
PhishTank SiteChecker - phishtanksitechecker.com/
TrendProtect - www.trendsecure.com/portal/en-US/tools/security_tools/trendprotect
Finjan SecureBrowsing - addons.mozilla.org/en-US/firefox/addon/4892
ID AntiPhishing - www.idsecuritysuite.com/products/id-antiphishing.htm
TrustPlus - www.trustplus.com/
Anti-Spoofing Email Tools
TrustedSource Toolbar - research.ciphertrust.com/tools.php?tool=toolbar
Phishing Detector v.1.0 For OE - www.fairtradeauthority.com/phishing_detector.php
Iconix eMail ID - www.iconix.com/
Delphish - www.delphish.com/
Phishing blacklists
Phishing website IP blacklists
Corporate Phishing Countermeasures
Corporate Authentication Phishing Countermeasures
Simple web-based techniques can be used by companies to give assurance to customers that they are on the right website.
Identity Cues - www.greenarmor.com/identity_cues.shtml
Entrust IdentityGuard - www.entrust.com/strong-authentication/identityguard/
RSA Consumer Solutions - www.rsa.com/node.aspx?id=3017 - was PassMark and Cyota FraudAction
PortWise - www.portwise.com/
ActivIdentity - www.actividentity.com/
WiKID HTTPS Mutual Authentication - www.wikidsystems.net/
Active Cookies - www.ravenwhite.com/technology.html
Digital Resolve Trusted Server - www.digital-resolve.net/solutions/trusted_server.html
Ceelox ID Online - www.ceelox.com/ceeloxidonline.html
Corporate Management Phishing Countermeasures
How not to look like a Phish - www.truste.org/pdf/How_Not_Look_Like_Phish.pdf
FSTC Counter-Phishing Initiative - www.fstc.org/scom/security_scom.php
Phish Report Network - www.phishreport.net/
MarkMonitor's Fraud Protection - www.markmonitor.com/solutions/fraudprevention/
RSA Security FraudAction - www.rsa.com/node.aspx?id=3020
Phishing, Identity Theft and Bank Fraud Detection - audited.netcraft.com/bank-fraud-detection
Consumer Protection Advice Service - sharecube.com/consumer-advice-alert-service.html
CipherTrust PhishRegistry - www.phishregistry.org/
Strider URL Tracer with Typo-Patrol - research.microsoft.com/URLTracer/
Nameprep - nameprep.org/
Internet Identity - www.internetidentity.com/
Digital Resolve Fraud Analyst - www.digital-resolve.net/solutions/fraudanalyst.html
Sophos PhishAlert - www.sophos.com/products/enterprise/alert-services/phishalert.html
Support Intelligence REACT - support-intelligence.com/
Melbourne IT Digital Brand Services - www.melbourneitdbs.com/online-brand-infringement/anti-phishing-service.php
Netcraft Phishing Site Feed - news.netcraft.com/phishing-site-feed
Phishing Archives
Phishing Archive - www.antiphishing.org/phishing_archive/phishing_archive.html
Examples of Phishing Emails - banksafeonline.org.uk/phishing_examples.html
Pfishing Scams - worldwidespam.info/phishing/
Millersmiles Honeytrap - honeytrap.millersmiles.co.uk/
Phishing Scams by Targeted Company - www.millersmiles.co.uk/scams.php
Phish tracker - www.dslreports.com/phishtrack
Open Phishing Database - opdb.berlios.de/
Phishing Alerts - www.fraudwatchinternational.com/phishing/
Internet Defence Phishery - phishery.internetdefence.net/
Other Identity Theft
Identity Theft Prevention and Survival - www.identitytheft.org/
FTC ID Theft - www.ftc.gov/bcp/edu/microsites/idtheft/
SSA Identity Theft - www.ssa.gov/pubs/idtheft.htm
Identity Theft and Fraud - www.usdoj.gov/criminal/fraud/idtheft.html
RCMP Identify Theft - www.rcmp.ca/scams/identity_theft_e.htm
Email Identity Theft - www.albionresearch.com/disaster/email_identity.php
Identity Theft Resources - www.privacyrights.org/identity.htm
Fight Identity Theft - www.fightidentitytheft.com/
Identity Theft and Protecting Your Credit - www.creditinfocenter.com/identity/
ID Theft Services - idfraud.org/
Fake Credit Report Sites - www.ftc.gov/bcp/conline/pubs/alerts/fakealrt.htm
Home Office Identity Fraud Steering Committee - www.identity-theft.org.uk/
Identity Fraud Consumer Guide - www.identity-theft.org.uk/
Social Security Number Fraud - www.ssnfraud.info/
Protecting Personal Information - www.fact-sheets.com/privacy-security/protecting_personal_info/
OneGuard Online — ID Theft - onguardonline.gov/idtheft.html
This work is licensed under a Creative Commons License. SPAM is a trademark of Hormel Foods.
Page last updated: 09-Aug-2008