DIY phishing kits
DIY phishing kits

DIY phishing kits found on the internet

Further rise in attacks likely with easy-to-use kits free to download

Robert Jaques

Do-it-yourself phishing kits are being made available for download free of charge from the internet, security watchers have warned.

Security company Sophos said that the availability of such kits, which require no technical knowledge to use, means that anyone with web access can potentially launch their own phishing attack and attempt to defraud unsuspecting computer users.

Advertisement

The DIY kits were found to contain all the graphics, web code and text required to construct bogus websites designed to have the same look and feel as legitimate online banking sites.

They also include spamming software that enables fraudsters to send out hundreds of thousands of phishing emails as bait for potential victims.

According to estimates by Sophos, hundreds of thousands of phishing emails are sent across the internet every day - and the problem is growing.

Graham Cluley, Sophos senior technology consultant, said in a statement: "Until now, phishing attacks have been largely the work of organised criminal gangs.

"However, the emergence of these 'build your own' phish kits means that any old Tom, Dick or Harry can now mimic bona fide banking websites and convince customers to disclose sensitive information such as passwords, Pin numbers and account details.

"There is plenty of profit to be made from phishing. By putting the necessary tools in the hands of amateurs, it's likely that the number of attacks will continue to rise."

Computer users should be wary of any emails asking them to reconfirm sensitive financial information. Sophos suggests that anti-spam software at the email gateway can prevent these unsolicited email messages from even reaching inboxes.

"Recipients of suspicious emails claiming to come from online banks should just delete them and should certainly not click on the links contained within the messages," said Cluley.

"Web hosts and internet service providers can also play their part in the fight against phishers by closing down websites if they find these kits posted on their servers."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Impact of phishing now equals virus outbreaks

250,000 phishing emails intercepted every month

Bugwatch: Foiling phishers

Formulating an effective anti-phishing strategy is vital

Automated kits fuel virus epidemic

Virus creation kits blamed as new variants Netsky.D and Bagel.G appear

Related whitepapers

Related jobs

Most watched

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation