|
Intelligence from our Anti-Fraud Command Center
Each month the RSA Anti-Fraud Command Center issues the RSA Online Fraud Report that includes a monthly highlight as well as over a half dozen charts with analyses featuring phishing trends such as top ten countries attacked, most used attacked vectors, and other data from the Center’s global phishing repository.
The Anti-Fraud Command Center is a 24x7 war-room that detects, tracks, blocks and shuts down phishing, pharming and Trojan attacks perpetrated by online fraudsters. An effective countermeasure against online fraud, RSA FraudAction has shut down more than 160,000 illicit web sites across 140 countries to date, protecting more than 320 organizations. Its fraud analysts shut down websites hosting online attacks, deploy countermeasures, and conduct extensive forensic work to help catch fraudsters and prevent future threats – significantly reducing the average lifetime of an online attack.
We invite you to review the reports to keep up with the latest threats. You are welcome to leverage the information for your own documents and other resources. RSA requests that any specific data or content be attributed to the "RSA Anti-Fraud Command Center" as the source.
Receive RSA's Monthly Online Fraud Reports
RSA Online Fraud Reports
Tuesday, January 26, 2010
As of January 1, 2010, the RSA Anti-Fraud Command Center has shut down 264,496 online attacks. In December, the total number of phishing attacks identified by RSA was 15,596 attacks, a three percent increase from November. The number of phishing attacks identified by RSA increased 17% from 2008 to 2009.
This month's highlight features an overview of the key results from the the 2010 consumer survey we just released. The full global report is available on the SRC.
Thursday, December 17, 2009
As of December 1, 2009, the AFCC has shut down 253,490 online attacks.
In November, we have seen phishing attacks decrease by 15 percent. The AFCC indicates this drop is likely due to the Rock Phish gang relocating the infrastructure they use to host phishing and malware attacks.
For the sixth consecutive month, regional banks in the U.S. continued to be the segment targeted most by online criminals.
This month's highlight offers insight into trends in phishing, vishing and smishing.
Monday, November 23, 2009
For the third month in a row, the Anti-Fraud Command Center reported record-breaking figures in terms of the number of phishing attacks identified by RSA in a single month.
Canada was the top hosting country for attacks in October due to the number of domains registered by the Rock Phish gang at Canadian-based registrars.
This month's highlight focuses on a tactic being used by fraudsters to recruit mules to reship high-end products purchased with stolen credit cards.
Monday, October 19, 2009
Some of the featured highlights include:
-September proved to be another record-breaking month in terms of the number of phishing attacks identified by RSA. A new all-time high of 17,365 attacks was reached.
-The UK suffered the largest volume of phishing attacks in September, beating out the U.S. for the first time since November 2008.
-This month's highlight focuses on man-in-the-browser attacks. It discusses how they work, where they are most prolific and why they are on the rise.
Thursday, September 24, 2009
Some of the featured highlights include:
As of September 1, 2009, the RSA Anti-Fraud Command Center has officially reached the 200,000 mark in terms of the number of attacks shut down. To date, they have shut down 209,261 online attacks.
The number of phishing attacks identified and addressed by the AFCC in August was 16,164 - the highest number of all-time.
The number of attacks hosted via fast-flux networks this month climbed to over 70 percent.
Thursday, August 27, 2009
The number of attacks launched in July rose by only 1.5 percent as compared to June, yet still marked a 12-month peak. While standard phishing attacks dropped five percent last month, fast-flux attacks climbed seven percent. Fast-flux attacks have outnumbered standard phishing attacks for three consecutive months now; a
trend also reflected in the Hosting Methods statistics.
Tuesday, July 28, 2009
As in May, the number of attacks launched in June rose by 10%, setting a new 11-month peak. Both fast-flux and standard attacks increased last month; standard attacks by 13% and fast-flux attacks by 5%. As in the previous month, the number of fast-flux attacks launched in June was greater than the number of standard phishing attacks.
Tuesday, July 07, 2009
The total number of phishing attacks in May 2009
increased 10 percent when compared to April 2009
(11,887 attacks in total) – marking a 12 month high. This may indicate an annual trend of higher numbers of phishing attacks occurring during the summer months.
Friday, May 29, 2009
The number of phishing attacks in April 2009 dropped slightly (seven percent) from March 2009. In March 2009 the number of attacks had increased 15 percent from February 2009 due to the increase in standard attacks and had marked the highest volume in since mid-2008.
Thursday, May 21, 2009
The total number of phishing attacks detected by the RSA Anti-Fraud Command Center in February 2009 rose by 18 percent when compared to January 2009 – representing an increase of 1,500 attacks.
Friday, March 06, 2009
The year 2009 began with a slight increase in the total number of phishing attacks detected by the RSA Anti-Fraud Command Center. The number of attacks that were directly instigated by the Rock Phish gang, combined with other fast-flux attacks, rose by 20%. This constituted most of the increase in phishing attacks over the course of January.
Tuesday, February 17, 2009
The vast reduction in the rate of phishing attacks during the July-to-September timeframe was attributed to the fact that the Rock Phish Gang had abandoned its previous infrastructure and started to use the Asprox botnet, as noted by the RSA FraudAction Research Lab on September 4 on its blog on RSA’s Speaking of Security.
*Note: We have changed the naming conventions for the Monthly Online Fraud Reports to reflect the month in which the reports are published
|
