Phishing

MUST READ Keep attackers from phishing in your waters TIP - Learn why phishing attacks continue to rise and three steps you can take to mitigate this risk. Helping your organization avoid phishing: E-mail authentication BOOK CHAPTER - In this excerpt from "Phishing: Cutting the Identity Theft Line" by Rachael Lininger and Russell Dean Vines, learn how e-mail authentication helps prevent phishing attacks.

NEWS: 1 - 3 of 83

	EV SSL certificates won't stop phishers, researchers say SearchSecurity.com | 31 Jul 2008 ARTICLE - Two researchers call Extended Validation (EV) SSL certificates a Band-Aid approach, and share their research of the phishing underground.

	Apple iPhone mail, Safari prone to spoofing SearchSecurity.com | 23 Jul 2008 ARTICLE - A security researcher discovered some design flaws in Apple's iPhone that could leave the smartphone vulnerable to phishers and spammers.

	Companies still monitoring email manually, survey finds SearchSecurity.com | 20 May 2008 ARTICLE - In addition to monitoring email as a result of an investigation, companies are hiring people to audit content in outgoing messages, according to a new survey.

	VIEW ALL NEWS ON PHISHING

EXPERT TECHNICAL ADVICE: 1 - 3 of 21

PHISHING EXPERTS
			John Strand ASK A QUESTION

	How secure is online banking today? 03 Mar 2008 EXPERT ANSWER - Most banks take the security of their online services seriously. In this expert Q&A, Michael Cobb explains why online banking is relatively safe -- with the exception of one particular mistake.

	How effective are phishing links that refer to FTP sites? 04 Jan 2008 EXPERT ANSWER - The vast majority of phishing emails still include HTTP links, but there has been a recent smattering that refer to FTP sites. In this SearchSecurity.com Q&A, Ed Skoudis explains how to be ready for the malicious messages.

	Thinking fast-flux: New bait for advanced phishing tactics 03 Jan 2008 TIP - Ed Skoudis reviews fast-flux botnet tactics and explains how to conduct an investigation of the advanced phishing technique.

	VIEW ALL EXPERT TECHNICAL ADVICE ON PHISHING

REFERENCE & LEARNING: 1 - 3 of 11

	Helping your organization avoid phishing: E-mail authentication John Wiley & Sons | 31 May 2005 BOOK CHAPTER - In this excerpt from "Phishing: Cutting the Identity Theft Line" by Rachael Lininger and Russell Dean Vines, learn how e-mail authentication helps prevent phishing attacks.

	Hacker's Challenge 3: Big Bait, Big Phish 26 May 2006 BOOK CHAPTER - In this excerpt from "Hacker's Challenge 3," author Bill Pennington describes a situation in which an organization's network is attacked and customer data is compromised.

	A Business Guide to Information Security: Threats and Compliance Kogan Page | 16 Jan 2006 BOOK CHAPTER - This excerpt from "A Business Guide to Information Security," identifies six future risks to information security and how they will affect individuals and organizations.

	VIEW ALL REFERENCE & LEARNING ON PHISHING

MAGAZINE CONTENT (free subscription required): 1 - 2 of 2

	Product Review: Sophos Endpoint Security and Control 8.0 Information Security Magazine | 01 Sep 2008 HOT PICK & PRODUCT REVIEWS - Sophos Endpoint Security and Control 8.0 is a comprehensive endpoint security product, offering antivirus, antispyware, host intrusion prevention, firewalling, application control, device control, and network access control.

	Ping Information Security Magazine | 01 Mar 2006 COLUMNS - William Pelgrin

	VIEW ALL MAGAZINE CONTENT ON PHISHING

WEBCASTS: 1 - 3 of 7

	Fact or Fiction: The Future of Email Attacks - Expert Podcast DOWNLOAD PODCAST PREMIERED:   31 OCT 2006, 09:00 EST (14:00, GMT) SUMMARY:   Borrowing heavily from the popular interview segment on ESPN's SportsCenter, this 10-12 minute Podcast features a "fact or fiction"-style interview about future email-based attacks.

	Messaging and Collaboration Security: Microsoft's Multi-layer Approach - Vendor Webcast VIEW WEBCAST PREMIERED:   17 OCT 2006, 09:00 EDT (13:00, GMT) SUMMARY:   Attend this informational webcast and discover messaging and collaboration security methods that help neutralize messaging threats with multiple layers of defense.

10 Things Every IT Manager Should Know About Email-borne Threats - Vendor Webcast VIEW WEBCAST PREMIERED:   19 OCT 2006, 14:00 EDT (18:00, GMT) SUMMARY:   With the number of spam emails expected to reach 42 billion messages by 2008, instituting an aggressive email security strategy that protects your gateway is an absolute must. This webcast examines an effective email security strategy that protects your company's messages and secures your organization's valuable information.

	VIEW ALL WEBCASTS ON PHISHING

WHITE PAPERS

	7 Security Questions to Ask Your SaaS Provider Published by: Information Security Magazine | 04 Sep 2008 JOURNAL ARTICLE - Outsourcing an application means your organization relinquishes some control; don't, however, loosen your grip on security.

	The Bad, the Good, and the Unsure: Setting a New Standard for Internet Security Published by: Kaspersky Lab | 05 Aug 2008 WHITE PAPER - The need for consumers to secure the computers they own is more pressing than many realize. This paper explains how leading security solutions may not offer the advanced protection you need.

	The Alarming Shift in Cybercrime: How Organized Attacks Now Target Your Wallet Published by: Blue Coat | 10 Jul 2008 WHITE PAPER - This paper will examine the shift in the nature of cybercrimes, how the thieves target their victims, and what can be done to prevent them.

	VIEW ALL WHITE PAPERS IN THIS TOPIC

DEFINITIONS: 1 - 3 of 5

	Rock Phish 25 Jul 2007 WORD - Rock Phish is both a phishing toolkit and the entity that publishes the toolkit. Phishing is an email fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial ...

	phishing 28 Oct 2003 WORD - Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. Typically, the messages appear to come from well known ...

	spear phishing 17 Oct 2005 WORD - Spear phishing is an e-mail spoofing fraud attempt that targets a specific organization, seeking unauthorized access to confidential data. As with the e-mail messages used in regular phishing expeditions, spear phishing ...

	VIEW ALL DEFINITIONS ON PHISHING

	SEE ALSO - Topics Related to Phishing:  Spam and Antispam