Slashdot Mirror
Netcraft: 5,600 Phishing Sites Since December
miller60 writes "Netcraft has tracked and blocked 5,600 known phishing sites since the December launch of its anti-phishing toolbar, which it has now updated with a risk rating feature that warns users about new sites with phishy characteristics, based on trends observed in known phishing scams. It has also started a service that makes the full list available of phishing sites as a continuously updated feed for service providers and companies to use in mail servers and web proxies." One bad sign: the phishing attacks I see are getting (on average) more professional in their phrasing -- it used to be easy to toss out the trawlers based on their spelling alone.
The PTO doesn't enfore antything. It only grants or revokes. Enforcements take place at courts and usually only after charge by the patent/trademark holder.
From the contents of your post, you seem to be doing quite well, but ...
I can't figure out an effective way to do it in only three posts.
Yes, indeed, I think you haven't figured out one very important small detail...
What would you do?
Hmmm, ..., maybe log in?
Can anyone help me?
You're welcome!
Firefox one-ups this already by doing 2 things:
1. Encrypted URLS turn the address bar to a gold color to remind you that you're on an encrypted site. And, more importantly,
2. In the lower right hand corner of the screen, Firefox tells you the name of the site to which the digital signature certificate is assigned.
Bill Clinton: Pimp we can believe in. - The Shirt!!!
Well according to this: http://news.earthweb.com/security/article.php/345
but man, someone spent a lot of time thinking it up.
Hint: Enable "full headers" on your e-mail. That way you won't spend a second before hitting the delete button.
I got a newer one just a short while ago that said:
- Subject:*** Your eBay Bid was Cancelled ***
-
5 83&BidCancelled=1 [original link removed]
Now, if I had bid on anything at ebay within the last year, I might have panicked and started clicking on links without stopping to think about it. Fortunately, I knew I hadn't bid on anything, so I (as I've learned to do) hovered my cursor over the links and saw that they went to www.kminsectcontrol.com (insect control? interesting).Dear eBay Community Member,
The bid that you entered for the item ( 5569407583[original link removed] ) has been cancelled. You can view the reason provided for the cancellation by selecting the link bellow[sic].
http://cgi.ebay.com/ws/eBayISAPI.dll?Item=5569407
Regards,
eBay
I just forwarded it to spoof@ebay.com which, sadly, I have in my address book because I have forwarded several suspicious emails to them. They always get back to me quickly and confirm that, yes, it was a spoof and to ignore it. Then they investigate the forwarded email take any actions they can against whoever sent it.
And every ebayer should have this page bookmarked: http://pages.ebay.com/help/policies/id-account-th
I agree, the phishers are getting better. Phishers like these try to trigger a knee-jerk emotional response and I bet it works way too often.
Sig cancelled due to lack of interest
I don't know how well it works, but there is always: spam@uce.gov It is the FTC's official phishing reporting address. http://www.usdoj.gov/spam.htm
Forward the message (with all headers -- I do this by forwarding as attachment in Thunderbird) to spoof@ebay.com. An automated service checks whether the email came from ebay. They claim to report phished emails to the proper authorities -- it's in their best interest if they do, although I don't know for sure what they do with the email. Still, forwarding an email is pretty darn easy. What have you got to lose?