There is no free phish: An analysis of “free” and live phishing kits

2nd USENIX Workshop on Offensive Technologies, WOOT 2008

Volumn , Issue , 2008, Pages

  Cova, Marco ^a   Kruegel, Christopher ^a   Vigna, Giovanni ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BACKDOORS; CONFIDENTIAL INFORMATION; IDENTITY THEFT; PHISHERS; PHISHING; THIRD PARTIES; TOOLS AND TECHNIQUES;

COMPUTER CRIME;

EID: 85084164343     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. D. Danchev. DIY phishing kits introducing new features. http://blogs.zdnet.com/security/?p=1104, 2008.
2. R. Dhamija and J. Tygar. The Battle Against Phishing: Dynamic Security Skins. In Proceedings of the Symposium on Usable Privacy and Security, 2005.
3. R. Dhamija, J. Tygar, and M. Hearst. Why Phishing Works. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, 2006.
4. C. Drake, J. Oliver, and E. Koontz. Anatomy of a Phishing Email. In Proceedings of the Conference on Email and Anti-Spam, 2004.
5. J. Franklin, V. Paxson, A. Perrig, and S. Savage. An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants. In Proceedings of the ACM Conference on Computer and Communications Security, 2007.
6. M. Friedman. There’s No Such Thing as a Free Lunch. Open Court Pub Co, 1975.
7. E. Gabrilovich and A. Gontmakher. The Homograph Attack. Communications of the ACM, 45(2), 2002.
8. S. Garera, N. Provos, M. Chew, and A. Rubin. A Framework for Detection and Measurement of Phishing Attacks. In Proceedings of the Workshop on Recurring Malcode, 2007.
9. A. Herzberg and A. Gbara. Security and Identification Indicators for Browsers against Spoofing and Phishing Attacks. Cryptology ePrint Archive, Report 2004/155, 2004.
10. T. Holz, C. Gorecki, K. Rieck, and F. Freiling. Measuring and Detecting Fast-Flux Service Networks. In Proceedings of the Network & Distributed System Security Symposium, 2008.
11. C. Jackson, D. Simon, D. Tan, and A. Barth. An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks. In Proceedings of Workshop on Usable Security, 2007.
12. M. Jakobsson and S. Myers, editors. Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft. Wiley, 2006.
13. E. Kirda and C. Kruegel. Protecting Users against Phishing Attacks with AntiPhish. In Proceedings of the International Computer Software and Applications Conference, 2005.
14. H. Luhn. Computer for Verifying Numbers. U.S. Patent 2,950,048, 1960.
15. D. McGrath and M. Gupta. Behind Phishing: An Examination of Phisher Modi Operandi. In Proceedings of the USENIX Workshop on Large-scale Exploits and Emergent Threats, 2008.
16. D. Miyamoto, H. Hazeyama, and Y. Kadobayashi. SPS: A Simple Filtering Algorithm to Thwart Phishing Attacks. In Proceedings of the Conference on Technologies for Advanced Heterogeneous Networks, 2005.
17. T. Moore and R. Clayton. Examining the Impact of Website Take-down on Phishing. In Proceedings of the APWG eCrime Researcher’s Summit, 2007.
18. T. Moore and R. Clayton. Evaluating the Wisdom of the Crowds in Assessing Phishing Websites. In Proceedings of the Conference on Financial Cryptography and Data Security, 2008.
19. P. Mutton. Phishing kits take advantage of novice fraudsters. http://news.netcraft.com/archives/2008/01/03/phishing kits take advantage of novice fraudsters.html.
20. J. Nazario. Loads.CC Bot Still Live, Still Targeted. http://asert.arbornetworks.com/2008/04/loadscc-bot-still-live-still-targeted/, 2008.
21. J. Nazario. NetBot Attacker Anti-CNN Tool. http://asert.arbornetworks.com/2008/04/netbot-attacker-anti-cnn-tool/, 2008.
22. Y. Pan and X. Ding. Anomaly Based Web Phishing Page Detection. In Proceedings of the Annual Computer Security Applications Conference, 2006.
23. B. Parno, C. Kuo, and A. Perrig. Phoolproof Phishing Prevention. In Proceedings of the Cryptography and Data Security International Conference, 2006.
24. PhishTank. http://www.phishtank.com/.
25. T. Raffetseder, E. Kirda, and C. Kruegel. Building Anti-Phishing Browser Plug-Ins: An Experience Report. In Proceedings of the International Workshop on Software Engineering for Secure Systems, 2007.
26. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. Mitchell. Stronger Password Authentication Using Browser Extensions. In Proceedings of the USENIX Security Symposium, 2005.
27. S. Schechter, R. Dhamija, A. Ozment, and I. Fischer. The Emperor’s New Security Indicators: An evaluation of website authentication and the effect of role playing on usability studies. In Proceedings of the IEEE Symposium on Security and Privacy, 2007.
28. Selenium. http://selenium.openqa.org/.
29. R. Thomas and J. Martin. the underground economy: priceless. ;login:, 2006.
30. A. Tsow. Phishing with Consumer Electronics: Malicious Home Routers. In Proceedings of the Models of Trust for the Web Workshop, 2006.
31. L. Wenyin, G. Huang, L. Xiaoyue, Z. Min, and X. Deng. Detection of Phishing Webpages Based on Visual Similarity. In Proceedings of the World Wide Web Conference, 2005.
32. Wikipedia. Sub7. http://en.wikipedia.org/wiki/Sub7.
33. M. Wu, R. Miller, and S. Garfinkel. Do Security Toolbars Actually Prevent Phishing Attacks? In Proceedings of the Conference on Human Factors in Computing Systems, 2006.
34. M. Wu, R. Miller, and G. Little. Web Wallet: Preventing Phishing Attacks by Revealing User Intentions. In Proceedings of the Symposium on Usable Privacy and Security, 2006.
35. Y. Zhang, S. Egelman, L. Cranor, and J. Hong. Phinding Phish: Evaluating Anti-Phishing Tools. In Proceedings of the Network & Distributed System Security Symposium, 2007.