SurfControl Global Threat Experts Tracking New Phishing Attack
Attacks Becoming More Sophisticated With Increased Use of Phishing Kits
SurfControl, the world leader in Internet content protection, is tracking a new phishing kit that has been distributed to phish for Chase account numbers by offering a $20 reward for participating in a survey.
spam probes employed by SurfControl Global Threat Experts have received several different variants of the message, each utilizing a different server; however the source code for each survey page is very similar. Initial reports unveiled by Netcraft indicated that a compromised server hosted in China was participating in this phish campaign. However, upon further review, SurfControl Threat Experts revealed additional activity on servers here in the United States. Known as a phish kit, the same source code is being re-used on a variety of systems, some which are free web-hosting servers. At least two were up at the time of this release. In recent months, SurfControl has seen a 30 percent increase in phishing kit attacks.
"Today's threat is like no other we have seen in that the first reported instance of this Chase bank phishing scam was being hosted on a compromised server owned by a bank in China," said Susan Larson, Vice President of SurfControl's Adaptive Threat Intelligence Service. "Even more interesting is that many of the web pages involved in this scam contain nearly identical source code leading us to believe this phishing attack is using a phishing kit and could become more widely distributed."
The SurfControl Adaptive Threat Intelligence service combines 24/7 research and analysis from the company's global team of threat detection experts with advanced AI technologies and the world's most comprehensive threat databases. All URLs used in this phishing attack are being added to the Phishing & Fraud Category of SurfControl's Internet Threat Database that is the critical back-end to the SurfControl Enterprise Protection Suite. Where appropriate, signatures are added to the same category in the anti-spam Agent Digital Fingerprints Database and new Heuristic rules will be created.
Reproduced from an article published by Yahoo! Finance
© Yahoo! Finance
The original article can be viewed here:
http://biz.yahoo.com/prnews/060313/sfm106.html?.v=38
Permalink Bookmark Digg this story
