Plenty more phish in the sea

Phew. I got back from my holiday - a lovely cruise on the adriatic, to find that the sea had been following me home. Well, judging from the amount of phishes that started last weekend, it felt like it. For a time, nearly every spam was a phishing email. A real torrent. I’ll let a picture tell the story:

This shows the last 30 days worth of phishing - the outbreak started towards the end of the 28th, peaked on the 29th then tailed off, then came to an end on the 1st of August.

So, around 4 times the normal volume. This is a view from just one site. Other sites saw a 10 fold increase.

The attack targeted a number of different institutions, using a small number of fake sites at various domain names. The IPs associated with the domains changed frequently. The common factor was a shared DNS server (or servers). The attack ended when the DNS servers were shutdown, which took several days.

You can pick over the bones at the Phishery.

This entry was posted on Friday, August 4th, 2006 at 3:49 pm and is filed under E-Mail, Phishing. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.