BBB Online - Phishing - Better Business Bureau's news, alerts and examples of phishing emails.
Computerworld - Phishing - Gives some real-life examples of the scam and tips on avoiding it.
Spoof Email Tutorial - Explains how scammers trick people into thinking they're being contacted by Ebay.
Wikipedia: Phishing - Explains some common phishing methods and dangers.
Sharecube White Papers - Describes problems with current proposed and actual antiphishing solutions and proposes specific steps to stop phishing now.
Trusted Electronic Communications Forum - A global, cross-industry consortium fighting phishing and spoofing attacks that lead to identity theft and brand distrust.
Anti-Phishing: Best Practices for Institutions and Consumers - White paper with detailed advice on controls against phishing.
Anti-phishing.info - Tips and information to help detect and avoid phishing attacks.
Green Armor Solutions - Sells Identity Cues software to help users recognize fake websites through visual reminders linked to user login details.
Content Verification - Company offers digital certificates to authenticate websites. Site provides technical information about phishing techniques.
First Monday - The Economy of Phishing - Peer-reviewed paper presents findings from the author's research to uncover phishing networks and an analysis of the phishing infrastructure.
Payments News - News stories about phishing.
Spoof Stick - Browser extension that displays the actual domains of websites as they are visited, regardless of what is shown in the browser's URL address bar.
The Phishing Guide - Understanding and Preventing Phishing Attacks - White paper explains how phishing works and outlines control measures that can be taken by individuals and institutions to minimize the risk.
My Way News - Article about phishers using stolen bank customer secrets to create duplicate bank cards and withdraw cash from ATMs.
Anti Phishing Technology - Report explains control measures that might be suitable for banks etc. to protect themselves and their customers against phishing attacks.
US-CERT Cyber Security Tip ST05-019 -- Preventing and Responding to Identity Theft - Straightforward advice for those who fall prey to phishing and similar attacks.
GralicWrap - Free anti-phishing software uses fraudulent site reports submitted by users to build a global blacklist.
Wireless Phishing Presentation at Toorcon Conference 2005 - Hacker presentation about the security vulnerabilities of wireless networks and the possibility of phishing using man-in-the-middle attacks. Contains some vulgar language.
Netcraft - Provides a browser toolbar to report and block phishing sites.
OnGuard Online - Phishing section of an informational website run by the US Federal Trade Commission. Offers advice on how to spot, avoid and report phishing attacks.
Fraud Eliminator - Anti-phishing toolbar with limited functionality free version.
Castlecops - The Phishing Incident Reporting and Termination team aims to respond quickly to phishing sites and get them taken offline as soon as practicable.
GeoTrust TrustWatch - Antiphishing browser extensions identify the certification status of sites listed in Google search outputs.
Why Phishing Works - Research paper from Harvard evaluated the deceptiveness of typical phishing emails.
Stay Safe Online - National Cyber Security Alliance website advises consumers on basic information security practices to avoid phishing and other forms of attack.
Bank Safe Online - Advice from a UK banking industry group about phishing, money mules and Trojans.
Gallery of Phishing Scams - A gallery of phishing messages claiming to come from banks, credit card companies, and auction houses. Learn to recognize fraud by studying these examples.
CallingID - Anti-phishing browser toolbar that runs 54 checks against websites visited and raises alerts if it detects phishing or dubious practices.
PhishTank - Clearing house for information about phishing plus an open API to integrate anti-phishing data into applications.
OCC Bulletin 2005-24 - Advice to banks from the Comptroller of the Currency Administrator of National Banks on how to deal with phisher attacks.
|