Download your phishing kit

By

People with the most basic technical knowledge are finding it increasingly easy to launch phishing attacks using read-made software they download from the internet.

According to anti-virus company Sophos, do-it-yourself phishing kits are growing rapidly in number, and they can be easily found and downloaded from the internet.


"It's a real free for all at the moment," said Graham Cluley, a consultant with Sophos. "We are seeing more and more of these DIY kits appearing. They are very sophisticated and require very little technical knowledge to use."

The kits come with all the graphics, web code and text that any phisher would need to create a bogus website. Many also come with spamming software to enable fraudsters to mass-mail their messages.

Cluely said that U.S. banks are among the favorite targets for these kits, along with the Paypal payment service.

"Anyone surfing the web can now get their hands on these kits, launch their own phishing attack and potentially defraud computer users of the contents of their bank accounts," he said.

"Phishing provides an extraordinary way to make money with little chance of getting caught."

He suggested that web hosts and ISPs can also play their part in the fight against phishers by closing down websites if they find these kits posted on their servers.

www.sophos.com

 

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

ACSC alerts to exploited MS SharePoint remote code execution flaw

ACSC alerts to exploited MS SharePoint remote code execution flaw

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Qantas obtains court order to prevent third-party access to stolen data

Qantas obtains court order to prevent third-party access to stolen data

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage

Log In

  |  Forgot your password?