DIY phishing kits
DIY phishing kits

DIY phishing kits found on the internet

Further rise in attacks likely with easy-to-use kits free to download

Robert Jaques

Do-it-yourself phishing kits are being made available for download free of charge from the internet, security watchers have warned.

Security company Sophos said that the availability of such kits, which require no technical knowledge to use, means that anyone with web access can potentially launch their own phishing attack and attempt to defraud unsuspecting computer users.

Advertisement

The DIY kits were found to contain all the graphics, web code and text required to construct bogus websites designed to have the same look and feel as legitimate online banking sites.

They also include spamming software that enables fraudsters to send out hundreds of thousands of phishing emails as bait for potential victims.

According to estimates by Sophos, hundreds of thousands of phishing emails are sent across the internet every day - and the problem is growing.

Graham Cluley, Sophos senior technology consultant, said in a statement: "Until now, phishing attacks have been largely the work of organised criminal gangs.

"However, the emergence of these 'build your own' phish kits means that any old Tom, Dick or Harry can now mimic bona fide banking websites and convince customers to disclose sensitive information such as passwords, Pin numbers and account details.

"There is plenty of profit to be made from phishing. By putting the necessary tools in the hands of amateurs, it's likely that the number of attacks will continue to rise."

Computer users should be wary of any emails asking them to reconfirm sensitive financial information. Sophos suggests that anti-spam software at the email gateway can prevent these unsolicited email messages from even reaching inboxes.

"Recipients of suspicious emails claiming to come from online banks should just delete them and should certainly not click on the links contained within the messages," said Cluley.

"Web hosts and internet service providers can also play their part in the fight against phishers by closing down websites if they find these kits posted on their servers."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Impact of phishing now equals virus outbreaks

250,000 phishing emails intercepted every month

Bugwatch: Foiling phishers

Formulating an effective anti-phishing strategy is vital

Automated kits fuel virus epidemic

Virus creation kits blamed as new variants Netsky.D and Bagel.G appear

Related whitepapers

Related jobs

Most watched

Summit: Salesforce.com on SaaS and information overload

How web services contribute to data headaches

V3.co.uk weekly debrief, 13 Nov 09

This week we discuss the inaugural V3.co.uk Summit

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

V3.co.uk weekly debrief, 13 Nov 09

This week we discuss the inaugural V3.co.uk Summit

Fingers on keyboard

New Flash vulnerability discovered

Web sites could be vulnerable to Flash attacks

Chris Adams

Summit: Microsoft Office to the rescue

Chris Adams, Office Client product manager for Microsoft UK, explains...

Illegal downloader

Industry and human rights campaigners united in opposition to "three strikes" plan

Critics says government proposals to curb illegal downloading are unworkable...

Primary Navigation