Phishing

Industries Targeted

For more than four years, Cyveillance has tracked phishing attacks that target the customers of enterprises and organizations.
Data for the three months ending December 2007, shows that companies attacked for the first time during the quarter fell
predominantly in the financial services sector.

Increased Use of Legitimate Sites

Analysis of phishing sites detected during the three months ending December 2007 indicates that phishing attacks are increasingly
using compromised, legitimate sites to host the spoof web pages.

  Q1 2007 Q2 2007 Q3 2007 Q4 2007
Percentage of phishing attacks that only use an IP address 19% 18% 13% 15%
Percentage of phishing URLs that use brand name 48% 46% 36% 51%
Percentage of phishing domains that use brand name 1% 1% 1% 2%
Percentage of phishing attacks that use a compromised site 34% 37% 38% 51%

Source: Cyveillance