Home / Industry

Phishers Beware!

The days of viral phishing are over. Since its inception, phishing, has always been a criminal magnet. It has a low start-up cost and few barriers to entry. At .ORG, Public Interest Registry, we work hard to combat phishing attacks. So much so, phishers have largely stopped registering domains on both .ORG and .INFO. In 2009, phishing reached an all time peak with a shocking number of attacks. In a new report by Boston-based APWG , called the Global Phishing Report, authors Greg Aaron and Rod Rasmussen delve into the attacks of 2009 and highlight the dangers of "phishing gangs."

According to the report, the gravity of phishing attacks which occurred in 2009 is alarming. The number of phishing URLs reported in the second half of 2009 were at about 125,000, more than double the attacks in the first half of the year. Additionally, the attacks occurred on about 30,000 unique domain names. Phish were also detected on over 2,000 unique IP addresses rather than on domain names, and of the 29,000 phishing domains, about 6,400 were registered maliciously by phishers. What's more shocking is that of those 6,400, about 4,100 were registered by one terrible player in the internet space — a dreaded beast called the Avalanche.

To date, Avalanche was one of the most sophisticated and damaging phishing tools on the Internet. It perfected a mass production system for deploying other phishing sites and malware, designed specifically to automate identity theft and facilitate authorized transactions from consumer bank accounts. This application was so vindictive that it was responsible for two-thirds of all attacks launched in the second half of 2009 and was responsible for the overall increase in phishing attacks ever recorded on the Internet.

Phishers are attracted to websites that are rich in registrants. Thus, .ORG has a large number of phish on compromised Web sites. However, .ORG's non-Avalanche phishing times are far below average. So much so, that the great majority of phishing is concentrated in just a few namespaces. In fact, 76% of all phishing occurred in just four TLD's: .COM, .EU, .NET, and .UK.

This informative APWG report thoroughly showcases the risk phishers pose to sites. At PIR, we are always working and advancing our preventative systems and remain committed to blocking phishers from registering on our domains.

Written by Alexa Raad, Chief Executive Officer of Public Interest Registry

About PIR

PIR

Public Interest Registry is a nonprofit corporation that operates the .org top-level domain – the world's third largest "generic" top-level domain with more than 10 million domain names registered worldwide. As an advocate for collaboration, safety and security on the Internet, Public Interest Registry's mission is to empower the global noncommercial community to use the Internet more effectively, and to take a leadership position among Internet stakeholders on policy and other issues relating to the domain naming system. (Learn More)

Related topics: Cybercrime, DNS, Domain Names, Registry Services, Security, Top-Level Domains

WEEKLY WRAP — Get CircleID's Weekly Summary Report by Email:

Comments

To post comments, please login or create an account.

Related Blogs

Related News

Topics

Industry Updates – Sponsored Posts

Verisign Celebrates .com's 30th Anniversary, Launches Domain Name Contest

What's in Your Attack Surface?

New .VOTE and .VOTO Domains Sunrise Period Begins

New .LGBT Domain Sunrise Period Begins

Season's Greetings - 2014 End of Year Message from DotConnectAfrica

Minds + Machines in 2014 and 2015

New .VOTE and .VOTO Domains Launched

Consumers Prefer the .ORGANIC Domain for True-Organic Goods

DNW Podcast Interview with Antony Van Couvering

TLD Registry and Right of the Dot Establish a Domain Name Industry "Dream Team"

TLD Registry Ltd Welcomes New Board Members

New .LGBT Top-Level Domain Launched

.sydney Domain Names Now Available in Pre-Release

"Chinese Domaining Masterclass" to be Presented at NamesCon Las Vegas in January 2015

Auction and Sales Channel Update

Radix Set to Launch .SITE TLD in 2015

Annual Manthan Award Event This Week

Domain Name .Africa Faces Hurdles - Q&A with Sophia Bekele

Join Paul Vixie & Robert Edmonds at the Upcoming Distinguished Speaker Series

Q3 2014 DDoS Trends: Attacks Exceeding 10 Gbps on the Rise

Sponsored Topics

Verisign

Security

Sponsored by
Verisign
Minds + Machines

Top-Level Domains

Sponsored by
Minds + Machines
Afilias

DNSSEC

Sponsored by
Afilias
dotMobi

Mobile

Sponsored by
dotMobi