The rapid growth of so-called phishing scams has left IT managers, industry groups and technology vendors scrambling to deal with the e-mail fraud problem.
A large part of the effort is focused on consumer awareness programs, cross-border law enforcement activities and improvements in information sharing between companies and authorities. But new tools and services that could help companies better detect and respond to such scams are also beginning to emerge.
For example, Cyota Inc., a New York company that offers secure payment services to banks, is beta-testing an antiphishing service that uses a network of probes seeded around the Internet to detect scams, said CEO Naftali Bennet. The technology could also help users apply countermeasures, Bennet added. He said he expects the beta-testing to continue for several months.
Bath, England-based Netcraft Ltd. on Jan. 5 launched a service aimed at detecting and tracking Web sites involved in phishing scams. Envisional Ltd., a Cambridge, England-based provider of antipiracy and online brand protection services, added antiphishing capabilities to its offerings in December. Brightmail Inc. in San Francisco and Cyveillance Inc. in Arlington, Va., have also announced services designed to stop phishing scams.
The goal of phishing is to fool people into parting with personal information such as their credit card, driver's license and bank account numbers. The schemes typically involve e-mails with messages, return addresses, links and branding that appear to come from reputable companies.
Last week, for instance, Citibank Inc. and London-based Barclays Bank PLC warned customers to ignore messages urging them to go to spoofed Web sites where they would be asked to provide sensitive data. Phishers have also gone after customers of eBay Inc., PayPal Inc. and other e-commerce companies.
Robert Garigue, the Toronto-based chief information security officer at Bank of Montreal, said that when the bank's customers were targeted by a recent phishing scam, it worked with the Royal Canadian Mounted Police and the FBI to quickly shut down a bogus Web site hosted by a service provider in the U.S. He said cooperation and information sharing are crucial to stemming the phishing problem.
Garigue thinks phishing is on the rise because increased security measures are making it harder for attackers to directly breach enterprise networks. "The consumer has become the weakest link in the trust chain," he said.
Dave Jevans, chairman of the recently formed Anti-Phishing Working Group, said the number of unique phishing scams has grown to about five per day. That compares with an average of 1.5 attacks daily before the holiday season, said Jevans, whose organization has more than 60 members, including financial services companies and IT vendors.
Companies whose names are used in scams can incur "substantial operational costs" if they have to change passwords and PINs for thousands of customers, said Gartner Inc. analyst John Pescatore.
Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
AOC Launches 18.5” Widescreen Green 16:9 LCD Monitor in Australia and New Zealand 2008-12-03 15:30:00+11
FrontRange Solutions eases software license management with new License Manager 3.0 2008-12-03 14:56:00+11
Progress Software's Cure for Managing Services-based Applications 2008-12-03 14:42:00+11
S3 Graphics Unleashes Full OpenGL® 3.0 API Support with Beta Driver for Chrome 500 Series GPUs 2008-12-03 14:08:00+11
Informatica Powercenter added to Nec Infoframe Solution Suite 2008-12-03 11:36:00+11
Taking On Demand CRM Integration to the Next Level
Discover the current integration challenges facing businesses attempting to deploy on demand CRM systems. Learn how to create comprehensive integration of your data, user interface and business process levels and transform a portfolio of disparate applications into a unified, virtual application suite.












